Dot1X Guest-Vlan Timeout - Cisco 300 Series Cli Manual

2
802. 1 X Commands
User Guidelines
The port cannot belong to the guest VLAN.
The guest VLAN and the WEB-Based authentication cannot be configured on a
port at the same time.
This command cannot be configured if the monitoring VLAN is enabled on the
interface.
The port is added to the guest VLAN as an egress untagged port.
If the authentication mode is single-host or multi-host, the value of PVID is set to
the guest VLAN_ID.
If the authentication mode is multi-sessions mode, the PVID is not changed and all
untagged traffic and tagged traffic not belonging to the unauthenticated VLANs
from unauthorized hosts are mapped to the guest VLAN.
If 802.1X is disabled, the port static configuration is reset.
See the User Guidelines of the dot1x host-mode command for more information.
Example
The following example enables unauthorized users on gi 1 1 to access the guest
VLAN.
switchxxxxxx(config)# interface gi11
switchxxxxxx(config-if)#
dot1x guest-vlan enable
2.9

dot1x guest-vlan timeout

Use the dot1x guest-vlan timeout Global Configuration mode command to set the
time delay between enabling 802.1X (or port up) and adding a port to the guest
VLAN. Use the no form of this command to restore the default configuration.
Syntax
timeout
dot1x guest-vlan timeout
no dot1x guest-vlan timeout
53 OL-32830-01 Command Line Interface Reference Guide