534 802.1x Commands
dot1x guest-vlan enable
The dot1x vlans guest-vlan enable Interface Configuration mode command enables unauthorized users
on the interface access to the Guest VLAN. Use the no form of this command to disable access
Syntax
• dot1x guest-vlan enable
• no dot1x guest-vlan enable
Default Configuration
Disabled.
Command Mode
Interface Configuration (Ethernet) mode.
User Guidelines
A device can have only one global guest VLAN. The guest VLAN is defined using the dot1x guest-vlan
Interface Configuration mode command.
Example
The following example enables unauthorized users on Ethernet port 1/e1 to access the guest VLAN.
dot1x mac-authentication
The dot1x mac-authentication Interface Configuration mode command enables authentication based
on the station’s MAC address. Use the no form of this command to disable MAC authentication.
Syntax
•
dot1x mac-authentication
{
mac-only
|
mac-and-802.1x
}
• no dot1x mac-authentication
•
mac-only
— Enable authentication based on the station’s MAC address only. 802.1X frames are
ignored.
•
mac-and-802.1x
— Enable 802.1X authentication and MAC address authentication on the
interface.
Console# configure
Console(config)# interface ethernet 1/e1
Console(config-if)# dot1x guest-vlan enable
book.book Page 534 Thursday, December 18, 2008 7:40 PM
To Next Page
Loading...
