Dot1X Guest-Vlan - H3C S7500E Series Command Manual

Command Manual – 802.1x - MAC Authentication
H3C S7500E Series Ethernet Switches

1.1.4 dot1x guest-vlan

Syntax
In system view:
dot1x guest-vlan vlan-id [ interface interface-list ]
undo dot1x guest-vlan [ interface interface-list ]
In Ethernet interface view:
dot1x guest-vlan vlan-id
undo dot1x guest-vlan
View
System view, Ethernet interface view
Parameters
vlan-id: ID of the VLAN to be specified as the guest VLAN, in the range 1 to 4094.
interface interface-list: Specifies an Ethernet port list, which can contain multiple
Ethernet ports. The interface-list argument is in the format of interface-list =
{ interface-type interface-number [ to interface-type interface-number ] } & <1-10>,
where interface-type represents the port type, interface-number represents the port
number, and & <1-10> means that you can provide up to 10 port indexes/port index lists
for this argument. The start port number must be smaller than the end number and the
two ports must of the same type.
Description
Use the dot1x guest-vlan command to configure the guest VLAN for specified or all
ports.
Use the undo dot1x guest-vlan command to remove the guest VLAN(s) configured for
specified or all ports.
By default, a port is configured with no guest VLAN.
In system view, this command configures guest VLAN for all ports with interface-list not
provided, and configures guest VLAN for specified with interface-list provided.
In Ethernet interface view, you cannot specify the interface-list argument and can only
configure guest VLAN for the current port.
For the guest VLAN feature to take effect on a port, make sure that:
802.1x is enabled.
The port access control method is set to portbased. When the port access control
method is macbased, you can configure a guest VLAN but your configuration will
not take effect.
The port access control mode is set to auto.
Chapter 1 802.1x Configuration Commands
1-7