Network Login Commands
ExtremeWare XOS 11.5 supports only the Summit X450 family of switches and the BlackDiamond 8800 series switch.
ExtremeWare XOS 11.5 Command Reference Guide
1058
configure netlogin dot1x guest-vlan
configure netlogin dot1x guest-vlan <vlan_name>
Description
Configures a guest VLAN for 802.1x.
Syntax Description
Default
N/A.
Usage Guidelines
This command configures the guest VLAN for 802.1x on the current virtual router (VR).
A guest VLAN provides limited or restricted network access if a supplicant does not respond to the
802.1x authentication requests sent by the switch. You configure a guest VLAN only on netlogin ports
with 802.1x enabled; movement to a guest VLAN is not supported on netlogin ports with MAC-based
or web-based authentication. 802.1x must be the only authentication method enabled on the port for
movement to guest VLAN. A port always moves untagged into the guest VLAN. You configure only
one guest VLAN per virtual router interface.
NOTE
The supplicant does not move to a guest VLAN if it fails authentication after an 802.1x exchange; the supplicant
moves to the guest VLAN only if it does not respond to an 802.1x authentication request.
By default, the switch attempts to authenticate the supplicant every 30 seconds for a maximum of three
tries. If the supplicant does not respond to the authentication requests, the client moves to the guest
VLAN. The number of authentication attempts is not a user-configured parameter. Use the following
command and specify the
supp-resp-timeout
parameter to modify the supplicant response timer:
configure netlogin dot1x timers [{server-timeout <server_timeout>} {quiet-period
<quiet_period>} {reauth-period <reauth_period>} {supp-resp-timeout
<supp_resp_timeout>}]
The port moves out of the guest VLAN if, during subsequent authentications, the port is successfully
authenticated and the RADIUS server indicates a different VLAN to move to.
To enable the guest VLAN, use the following command:
enable netlogin dot1x guest-vlan ports [all | <ports>]
vlan_name
Specifies the name of the guest VLAN.
