As illustrated in the above figure, on the switch port Ethernet1/2, the 802.1x feature is enabled,
and the VLAN10 is set as the port's Guest VLAN. Before the user gets authenticated or when
the user fails to do so, port Ethernet1/2 is added into VLAN10, allowing the user to access the
Update Server.
Update server
Figure 42-15: User Being Online, VLAN Being Offline
As illustrated in the above figure, when the users become online after a successful
authentication, the authentication server will assign VLAN5, which makes the user and
Ethernet1/6 both in VLAN5, allowing the user to access the Internet.
Update server
Ethernet1/3
VLAN10
SWITCH
Ethernet1/
2
User
Figure 42-14: User Joining Guest VLAN
Ethernet1/3
VLAN10
SWITCH
Ethernet1/
Ethernet1/6
2
VLAN5
User
Authenticator server
VLAN2
Ethernet1/6
VLAN5
Internet
Authenticator server
VLAN2
Internet
42-153