802.1X Commands
Cisco Sx350 Ph. 2.2.5 Devices - Command Line Interface Reference Guide 98
3
stations, in order to proceed to the forwarding state immediately after successful
authentication.
Example
The following example sets 802.1X authentication on gi11 to auto mode.
sing
switchxxxxxx(config)#
interface
gi1
1
switchxxxxxx(config-if)#
dot1x port-control auto
3.16 dot1x radius-attributes vlan
To enable RADIUS-based VLAN assignment, use the dot1x radius-attributes vlan
command in Interface Configuration mode. To disable RADIUS-based VLAN
assignment, use the no form of this command.
Syntax
dot1x radius-attributes vlan [reject | static]
no dot1x radius-attributes vlan
Parameters
• reject—If the RADIUS server authorized the supplicant, but did not provide
a supplicant VLAN the supplicant is rejected. If the parameter is omitted,
this option is applied by default.
• static—If the RADIUS server authorized the supplicant, but did not provide
a supplicant VLAN, the supplicant is accepted.
Default Configuration
reject
Command Mode
Interface (Ethernet) Configuration mode
User Guidelines
If RADIUS provides invalid VLAN information, the authentication is rejected.