Dot1X Host-Mode - Dell MXL 10GbE Reference Manual

To disable the guest VLAN, use the no dot1x guest-vlan vlan-id command.
Parameters
vlan-id
Defaults Not configured.
Command CONFIGURATION (conf-if-interface-slot/port)
Modes
Command
Version 9.2(0.0)
History
Usage
1X authentication is enabled when an interface is connected to the switch. If the
Information
host fails to respond within a designated amount of time, the authenticator places
the port in the guest VLAN.
If a device does not respond within 30 seconds, it is assumed that the device is not
802.1X capable. Therefore, a guest VLAN is allocated to the interface and
authentication, for the device, occurs at the next reauthentication interval (dot1x
reauthentication).
If the host fails authentication for the designated number of times, the
authenticator places the port in authentication failed VLAN (dot1x auth-fail-
vlan).
Related
•
Commands
•
•

dot1x host-mode

Enable single-host or multi-host authentication.
Syntax
dot1x host-mode {single-host | multi-host | multi-auth}
Parameters
single-host
multi-host
multi-auth
802.1X
Enter the VLAN Identifier. The range is from 1 to 4094.
Introduced on the MXL 10/40GbE Switch IO Module.
NOTE: You can create the Layer 3 portion of a guest VLAN and authentication
fail VLANs regardless if the VLAN is assigned to an interface or not. After an
interface is assigned a guest VLAN (which has an IP address), routing through
the guest VLAN is the same as any other traffic. However, the interface may
join/leave a VLAN dynamically.
dot1x auth-fail-vlan — Configures an authentication failure VLAN.
dot1x reauthentication
dot1x reauth-max — Configure the maximum number of times to re-
authenticate a port before it becomes unauthorized.
Enable single-host authentication.
Enable multi-host authentication.
Enable multi-supplicant authentication.
— Enables periodic re-authentication of the client.
129