802.1X Commands
89 Cisco Sx350 Ph. 2.2.5 Devices - Command Line Interface Reference Guide
3
If the authentication mode is single-host or multi-host, the value of PVID is set to
the guest VLAN_ID.
If the authentication mode is multi-sessions mode, the PVID is not changed and all
untagged traffic and tagged traffic not belonging to the unauthenticated VLANs
from unauthorized hosts are mapped to the guest VLAN.
If 802.1X is disabled, the port static configuration is reset.
See the User Guidelines of the dot1x host-mode command for more information.
Example
The following example enables unauthorized users on gi11 to access the guest
VLAN.
switchxxxxxx(config)#
interface
gi11
switchxxxxxx(config-if)#
dot1x guest-vlan enable
3.9 dot1x guest-vlan timeout
To set the time delay between enabling 802.1X (or port up) and adding a port to
the guest VLAN, use the dot1x guest-vlan timeout command in Global
Configuration mode. To restore the default configuration, use the no form of this
command.
Syntax
dot1x guest-vlan timeout
timeout
no dot1x guest-vlan timeout
Parameters
•
timeout
—Specifies the time delay in seconds between enabling 802.1X (or
port up) and adding the port to the guest VLAN. (Range: 30–180).
Default Configuration
The guest VLAN is applied immediately.
Command Mode
Global Configuration mode