Allied Telesis AlliedWare Plus - Auth Guest-Vlan Forward

C613-50100-01 REV C Command Reference for x930 Series 2103
AlliedWare Plus™ Operating System - Version 5.4.6-1.x
AUTHENTICATION COMMANDS
AUTH
GUEST-VLAN FORWARD
auth guest-vlan forward
Overview Use this command to enable packet forwarding from the Guest VLAN to a
destination IP address or subnet. If this command is configured, the device can
lease DHCP addresses and accept access to a limited part of your network. Also,
when using NAP authentication, the supplicant can log on to a domain controller
to gain certification.
Use the no variant of this command to disable packet forwarding from the Guest
VLAN to a destination IP address or subnet.
Syntax
auth guest-vlan forward {<ip-address>|<ip-address/mask>}
[dns|tcp <1-65535>|udp <1-65535>]
no auth guest-vlan forward {<ip-address>|<ip-address/mask>}
[dns|tcp <1-65535>|udp <1-65535>]
Default Forwarding is disabled by default.
Mode Interface Configuration mode for a specified switch port, or Authentication Profile
mode
Usage Before using this command, you must configure the guest VLAN with the auth
guest-vlan command.
Example To enable packet forwarding from the guest VLAN to the destination IP address on
interface port1.0.2, use the commands:
awplus# configure terminal
awplus(config)# interface port1.0.2
awplus(config-if)# auth guest-vlan forward 10.0.0.1
To enable forwarding of DNS packets from the guest VLAN to the destination IP
address on interface port1.0.2, use the commands:
awplus# configure terminal
awplus(config)# interface port1.0.2
awplus(config-if)# auth guest-vlan forward 10.0.0.1 dns
Parameter Description
<ip-address>
<ip-address/

mask>
The IP address or subnet to which the guest VLAN can forward
packets, in dotted decimal notation
dns Enable forwarding of DNS packets
tcp <1-65535> Enable forwarding of packets for the specified TCP port number
udp <1-65535> Enable forwarding of packets for the specified UDP port number