Configuring Security
802.1X
Cisco Small Business 300 Series Managed Switch Administration Guide 214
16
Unauthenticated VLANs and the Guest VLAN
Unauthenticated VLANs and Guest VLAN provide access to services that do not
require the subscribing devices or ports to be 802.1x or MAC-Based authenticated
and authorized.
An unauthenticated VLAN is a VLAN that allows access by both authorized and
unauthorized devices or ports. You can configure one or more VLAN to be an
unauthenticated in the Creating VLANs section in the Configuring Security
chapter. An unauthenticated VLAN has the following characteristics:
• It must be a static VLAN, and cannot be the Guest VLAN or the Default VLAN.
• The member ports must be manually configured as tagged members.
• The member ports must be trunk and/or general ports. An access port
cannot be member of an unauthenticated VLAN.
The Guest VLAN, if configured, is a static VLAN with the following characteristics.
• Must be manually defined from an existing static VLAN.
• Is automatically available only to unauthorized devices or ports of devices
that are connected and Guest VLAN enabled.
• If a port is Guest VLAN enabled, the switch automatically adds the port as
untagged member of the Guest VLAN when the port is not authorized, and
remove the port from the Guest VLAN when the first supplicant of the port
is authorized.
• The Guest VLAN cannot be used as the Voice VLAN and an unauthenticated
VLAN.
The switch also uses the Guest VLAN for the authentication process at ports
configured with Multiple Session mode and MAC-Based Authentication.
Therefore, you must configure a Guest VLAN before you can use the MAC
authentication mode.
To Next Page
Loading...
Need help?
General
