217
passwords entered. You can deploy a limited set of network resources in the MAC authentication
guest VLAN. For example, a software server for downloading software and system patches.
You cannot specify a VLAN as both a super VLAN and a MAC authentication guest VLAN on a port.
For more information about super VLANs, see
Layer 2—LAN Switching Configuration Guide
.
On a port, the MAC authentication guest VLAN configuration is mutually exclusive with the MAC
authentication guest VSI and MAC authentication critical VSI settings.
Before you delete a VLAN that has been set as a MAC authentication guest VLAN, use the
undo
mac-authentication guest-vlan
command to remove the guest VLAN configuration.
Examples
# Configure VLAN 100 as the MAC authentication guest VLAN on Ten-GigabitEthernet 1/0/1.
<Sysname> system-view
[Sysname] interface ten-gigabitethernet 1/0/1
[Sysname-Ten-GigabitEthernet1/0/1] mac-authentication guest-vlan 100
Related commands
display mac-authentication
reset mac-authentication guest-vlan
mac-authentication guest-vlan auth-period
Use
mac-authentication guest-vlan auth-period
to set the interval at which the device
authenticates users in the MAC authentication guest VLAN.
Use
undo mac-authentication guest-vlan auth-period
to restore the default.
Syntax
mac-authentication guest-vlan auth-period period-value
undo mac-authentication guest-vlan auth-period
Default
The device authenticates users in the MAC authentication guest VLAN every 30 seconds.
Views
Layer 2 Ethernet interface view
Layer 2 aggregate interface view
Predefined user roles
network-admin
mdc-admin
Parameters
period-value
: Specifies the authentication interval for users in the MAC authentication guest VLAN.
The value range is 1 to 3600, in seconds.
Examples
# Set the authentication interval to 150 seconds for users in the MAC authentication guest VLAN on
Ten-GigabitEthernet 1/0/1.
<Sysname> system-view
[Sysname] interface ten-gigabitethernet 1/0/1
[Sysname-Ten-GigabitEthernet1/0/1] mac-authentication guest-vlan auth-period 150