Configuring A Guest Vlan - H3C S7500E Series Operation Manual

Operation Manual – 802.1x - MAC Authentication
H3C S7500E Series Ethernet Switches
The 802.1x proxy detection function depends on the online user handshake
function. Be sure to enable handshake before enabling proxy detection and to
disable proxy detection before disabling handshake.
You can neither add an 802.1x-enabled port into an aggregation group nor enable
802.1x on a port being a member of an aggregation group.
Once enabled with the 802.1x multicast trigger function, a port sends multicast
trigger messages to the client periodically to initiate authentication.
For a user-side device sending untagged traffic, the voice VLAN function and
8021.x are mutually exclusive and cannot be configured together on the same port.
For details about voice VLAN, refer to VLAN Configuration.
In EAP relay authentication mode, the authenticator encapsulates the 802.1x user
information in the EAP attributes of RADIUS packets and sends the packets to the
RADIUS server for authentication. In this case, you can configure the
user-name-format command but it does not take effect. For information about the
user-name-format command, refer to AAA RADIUS HWTACACS Commands.
If the username of a supplicant contains the version number or one or more blank
spaces, you can neither retrieve information nor disconnect the supplicant by
using the username. However, you can use items such as IP address and
connection index number to do so.

1.3 Configuring a Guest VLAN

1.3.1 Configuration Prerequisites
Enable 802.1x
Set the port access control method to portbased for the port
Set the port access control mode to auto for the port
Create the VLAN to be specified as the guest VLAN
1.3.2 Configuration Procedure
Follow these steps to configure Guest VLAN:
To do...
Enter system view
Configure the guest
VLAN for specified
or all ports
Use the command...
system-view
dot1x guest-vlan vlan-id [ interface
interface-list ]
Or in Ethernet interface view
interface interface-type
interface-number
dot1x guest-vlan vlan-id
1-16
Chapter 1 802.1x Configuration
Remarks
—
Required
By default, a port is
configured with no
guest VLAN.