Cisco Catalyst 2960-XR - Configuring a Guest VLAN

PurposeCommand or Action
Verifies your entries.show running-config
Example:
Switch# show running-config
Step 6
(Optional) Saves your entries in the configuration file.copy running-config startup-config
Example:
Switch# copy running-config startup-config
Step 7
Configuring a Guest VLAN
When you configure a guest VLAN, clients that are not 802.1x-capable are put into the guest VLAN when
the server does not receive a response to its EAP request/identity frame. Clients that are 802.1x-capable but
that fail authentication are not granted network access. The switch supports guest VLANs in single-host or
multiple-hosts mode.
Beginning in privileged EXEC mode, follow these steps to configure a guest VLAN. This procedure is optional.
SUMMARY STEPS
1.
configure terminal
2.
interface interface-id
3.
Use one of the following:
•
switchport mode access
•
switchport mode private-vlan host
4.
authentication event no-response action authorize vlan vlan-id
5.
end
DETAILED STEPS
PurposeCommand or Action
Enters the global configuration mode.configure terminal
Example:
Switch# configure terminal
Step 1
Catalyst 2960-XR Switch Security Configuration Guide, Cisco IOS Release 15.0(2)EX1
OL-29434-01 269
Configuring IEEE 802.1x Port-Based Authentication
Configuring a Guest VLAN