Allied Telesis AlliedWare Plus - Page 2101

C613-50100-01 REV C Command Reference for x930 Series 2101
AlliedWare Plus™ Operating System - Version 5.4.6-1.x
AUTHENTICATION COMMANDS
AUTH
GUEST-VLAN
The Guest VLAN routing mode in this release overcomes these issues. With the
Guest VLAN routing mode, the switch can lease DHCP addresses and accept access
to a limited network.
Note that Guest VLAN can use only untagged ports.
See the AAA and Port Authentication Feature Overview and Configuration Guide
for information about:
• Guest VLAN, and
• restrictions regarding combinations of authentication enhancements
working together
Examples To define vlan100 and assign the guest VLAN feature to vlan100 on interface
port1.0.2, and enable routing from the guest VLAN to other VLANs, use the
following commands:
awplus# configure terminal
awplus(config)# vlan database
awplus(config-vlan)# vlan 100
awplus(config-vlan)# exit
awplus(config)# interface port1.0.2
awplus(config-if)# dot1x port-control auto
awplus(config-if)# auth guest-vlan 100 routing
To disable the guest VLAN feature on port1.0.2, use the following commands:
awplus# configure terminal
awplus(config)# interface port1.0.2
awplus(config-if)# no auth guest-vlan
To define vlan100 and assign the guest VLAN feature to vlan100 on authentication
profile ‘student’, use the commands:
awplus# configure terminal
awplus(config)# vlan database
awplus(config-vlan)# vlan 100
awplus(config-vlan)# exit
awplus(config)# auth profile student
awplus(config-auth-profile)# auth guest-vlan 100
To disable the guest VLAN feature on authentication profile ‘student’, use the
commands:
awplus# configure terminal
awplus(config)# auth profile student
awplus(config-auth-profile)# no auth guest-vlan
Related
Commands
auth profile (Global Configuration)