2-15
information about the user-name-format command, refer to AAA Commands in the Security
Volume.
z If the username of a client contains the version number or one or more blank spaces, you can
neither retrieve information nor disconnect the client by using the username. However, you can
use items such as IP address and connection index number to do so.
z The online user handshake security function is implemented based on the online user handshake
function. To bring the security function into effect, keep the online user handshake function
enabled.
z The iNode client software and iMC server are recommended to ensure the normal operation of the
online user handshake security function.
z Once enabled with the 802.1X multicast trigger function, a port sends multicast trigger messages
to the client periodically to initiate authentication.
z For a user-side device sending untagged traffic, the voice VLAN function and 802.1X are mutually
exclusive and cannot be configured together on the same port. For details about voice VLAN,
refer to VLAN Configuration in the Access Volume.
Configuring an 802.1X Port-based Guest VLAN
Configuration prerequisites
z Enable 802.1X.
z Create the VLAN to be specified as the guest VLAN.
z Set the port access control method to portbased.
z Ensure that the 802.1X multicast trigger function is enabled.
Configuration procedure
Follow these steps to configure a port-based guest VLAN:
To do… Use the command… Remarks
Enter system view
system-view —
In system
view
dot1x guest-vlan
guest-vlan-id [ interface
interface-list ]
interface interface-type
interface-number
Configure the
guest VLAN
for specified
or all ports
In Ethernet
interface view
dot1x guest-vlan vlan-id
Required
Use either approach.
By default, a port is configured
with no guest VLAN.
z Different ports can be configured with different guest VLANs, but a port can be configured with
only one guest VLAN.
z You cannot configure both the guest VLAN function and the free IP function in EAD fast
deployment.
To Next Page
Loading...
