To Next Page

To Previous Page

Chapter 8

| General Security Measures

Network Access (MAC Address Authentication)

– 255 –

network-access

guest-vlan

Use this command to assign all traffic on a port to a guest VLAN when 802.1x

authentication is rejected. Use the no form of this command to disable guest VLAN

assignment.

Syntax

network-access guest-vlan vlan-id

no network-access guest-vlan

vlan-id - VLAN ID (Range: 1-4094)

Default Setting

Disabled

Command Mode

Interface Configuration

Command Usage

◆ The VLAN to be used as the guest VLAN must be defined and set as active (See

the vlan database command).

◆ When used with 802.1X authentication, the intrusion-action must be set for

“guest-vlan” to be effective (see the dot1x intrusion-action command).

Example

Console(config)#interface ethernet 1/1

Console(config-if)#network-access guest-vlan 25

Console(config-if)#

network-access

link-detection

Use this command to enable link detection for the selected port. Use the no form of

this command to restore the default.

Syntax

[no] network-access link-detection