Configuring Access Guardian Configuring Access Guardian Policies
OmniSwitch AOS Release 6 Network Configuration Guide September 2009 page 34-25
802.1x 2/12 supplicant policy authentication pass
group-mobility captive-portal fail vlan 10 captive-
portal
If the 802.1x authentication process is successful
but does not return a VLAN ID for the device, then
the following occurs:
1 Group Mobility rules are applied.
2 If Group Mobility classification fails, then the
user is prompted to enter a user name and pass-
word through a web-based portal.
If the device fails 802.1x authentication, then the
following occurs:
1 If VLAN 10 exists and is not an authenticated
VLAN, then the device is assigned to
VLAN 10.
2 If VLAN 10 does not exist or is an authenti-
cated VLAN, then the user is prompted to enter
a user name and password through a web-
based portal.
802.1x 2/1 supplicant policy authentication fail
captive-portal
If the 802.1x authentication process is successful
but does not return a VLAN ID, the user is blocked
from accessing the switch on port 2/1.
If the device fails 802.1x authentication, then the
user is prompted to enter a user name and pass-
word through a web-based portal.
802.1x 2/12 supplicant policy authentication pass
user-network-profile Engineering block fail vlan
10 captive-portal
If the 802.1x authentication process is successful
but does not return a VLAN ID, then the following
occurs:
1 The “Engineering” User Network Profile
(UNP) is applied.
2 If applying the UNP fails, the user is blocked
from accessing the switch on port 2/12.
If the device fails 802.1x authentication, then the
following occurs:
1 If VLAN 10 exists and is not an authenticated
VLAN, then the device is assigned to
VLAN 10.
2 If VLAN 10 does not exist or is an authenti-
cated VLAN, then the user is prompted to enter
a user name and password through a web-
based portal.
802.1x 2/1 supplicant policy authentication fail
user-network profile Engineering block
If the 802.1x authentication process is successful
but does not return a VLAN ID, the device is
blocked from accessing the switch on port 2/1.
If the device fails 802.1x authentication, then the
following occurs:
1 The “Engineering” UNP is applied.
2 If applying the UNP fails, the user is blocked
from accessing the switch on port 2/1.
Supplicant Policy Command Example Description