Configuration Guide 802.1x Configuration
view the dynamic VLAN auto-switching settings
show dot1x user id session_id
View the user information in session-id, including the dynamic
VLAN auto-switching information.
View the actual VLAN where the user is.
The VLAN auto-switching function is configured on access devices. For the related precautions, see the chapter of Other
Precautions of 802.1x Configuration.
Implementing GUEST VLAN Function
With the GUEST VLAN function enabled on the port, this port will be added to the guest vlan if any of the following
conditions is met:
The port will successively send out authentication packets for three times. No EAPOL response packet is received
within auto-req req-interval*3.
No EAPOL response packet is received within 90 seconds.
Failed MAC address authentication in MAC mode.
Use show runninng-config to view the configuration and show vlan to check whether the port jumps to guest vlan or
not .
Follow these steps to configure a port whether to be allowed to jump to GUEST VLAN or not:
Ruijie(config-if-type ID)#interface interface
Enter interface configuration mode.
Ruijie(config-if-type ID)#dot1x dynamic-vlan enable
Allow Vlan jump on the interface.
Ruijie(config-if-type ID)# [no] dot1x guest-vlan vid
Configure whether to enable guest vlan, which is disabled
by default.
Guest vlan takes effect unless you configure dot1x dynamic-vlan enable.
It is better not to configure L2 attributes when configuring guest vlan, especially not to set vlan on the port
manually.
After the port is added to guest vlan, if there is eapol packet received on this port or the port state is switched
from linkup to linkdown, the port will exit guest vlan.
To Next Page
Loading...
