91
Configuration procedure
To enable the 802.1X critical voice VLAN feature on a port:
Step Command
Remarks
1.
Enter system view.
system-view
N/A
2.
Enter Layer 2 Ethernet
interface view.
interface
interface-type
interface-number
N/A
3.
Enable the 802.1X critical
voice VLAN feature on a
port.
dot1x critical-voice-vlan
By default, the 802.1X critical
voice VLAN feature is disabled on
the port.
Sending 802.1X protocol packets out of a port
without VLAN tags
After an 802.1X user passes authentication on a port, the 802.1X server assigns authorization
attributes to the access device. If the port is assigned to a VLAN as a tagged member, the device
sends packets to the client with VLAN tags.
This feature enables the device to send 802.1X protocol packets without VLAN tags. It prevents
terminal devices connected to the port from failing 802.1X authentication because they cannot
identify VLAN tags.
This feature is not available for Ethernet ports whose link type is access.
To enable the device to send 802.1X protocol packets out of a port without VLAN tags:
Step Command
Remarks
1.
Enter system view.
system-view
N/A
2.
Enter Layer 2 Ethernet
interface view.
interface
interface-type
interface-number
N/A
3.
Enable the device to send
802.1X protocol packets
out of the port without
VLAN tags.
dot1x eapol untag
By default, whether the device sends
802.1X EAPOL packets out of a port
with VLAN tags depends on the port
configuration and the server-assigned
VLAN setting.
Specifying supported domain name delimiters
By default, the access device supports the at sign (@) as the delimiter. You can also configure the
access device to accommodate 802.1X users who use other domain name delimiters. The
configurable delimiters include the at sign (@), backslash (\), dot (.), and forward slash (/).
Usernames that include domain names typically use the
username
+
domain-delimiter
+
domain-name
format (for example, 123@abc). However, if the domain delimiter is the backslash (\), usernames
that include domain names use the
domain-name
\
username
format.
If an 802.1X username string contains multiple configured delimiters, the rightmost delimiter is the
domain name delimiter. For example, if you configure the backslash (\), dot (.), and forward slash (/)
as delimiters, the domain name delimiter for the username string 121.123/22\@abc is the backslash
(\). The username is
@abc
and the domain name is
121.123/22
.
