H3C S5120-EI Series - Page 631

1-1
1 802.1X Configuration
When configuring 802.1X, go to these sections for information you are interested in:
z 802.1X Overview
z Configuring 802.1X
z Configuring a Guest VLAN
z Configuring an Auth-Fail VLAN
Configuration prerequisites
z Create the VLAN to be specified as the Auth-Fail VLAN.
z To configure a port-based Auth-Fail VLAN, make sure that the port access control method is
portbased, and the 802.1X multicast trigger function is enabled.
z To configure a MAC-based Auth-Fail VLAN, make sure that the port access control method is
macbased and the MAC VLAN function is enabled on the port. For the MAC VLAN configuration,
refer to VLAN Configuration in the Access Volume.
Configuration procedure
Follow these steps to configure an Auth-Fail VLAN:
To do… Use the command… Remarks
Enter system view
system-view
—
Enter Ethernet interface view
interface interface-type
interface-number
—
Configure the Auth-Fail VLAN
for the port
dot1x auth-fail vlan
authfail-vlan-id
Required
By default, a port is configured
with no Auth-Fail VLAN.