Edge-Core ECS4510-28P User Manual page 895

Use this command to assign all traffic on a port to a guest VLAN when
network-access
802.1x authentication is rejected. Use the no form of this command to
guest-vlan
disable guest VLAN assignment.
S
YNTAX
D
EFAULT
Disabled
C
OMMAND
Interface Configuration
C
OMMAND
◆
◆
E
XAMPLE
Console(config)#interface ethernet 1/1
Console(config-if)#network-access guest-vlan 25
Console(config-if)#
Use this command to enable link detection for the selected port. Use the
network-access
no form of this command to restore the default.
link-detection
S
YNTAX
D
EFAULT
Disabled
C
OMMAND
Interface Configuration
E
XAMPLE
Console(config)#interface ethernet 1/1
Console(config-if)#network-access link-detection
Console(config-if)#
network-access guest-vlan vlan-id
no network-access guest-vlan
vlan-id - VLAN ID (Range: 1-4093)
S
ETTING
M
ODE
U
SAGE
The VLAN to be used as the guest VLAN must be defined and set as
active (See the vlan database
When used with 802.1X authentication, the intrusion-action must be
set for "guest-vlan" to be effective (see the
command).
[no] network-access link-detection
S
ETTING
M
ODE
– 895 –
| General Security Measures
C 27
HAPTER
Network Access (MAC Address Authentication)
command).
dot1x intrusion-action