115
Default
The access device supports only the at sign (@) delimiter for 802.1X users.
Views
System view
Default command level
2: System level
Parameters
string
: Specifies a set of 1 to 16 domain name delimiters for 802.1X users. No space is required
between delimiters. Available delimiters include the at sign (@), backslash (/), and forward slash (\).
Usage guidelines
The delimiter set you configured overrides the default setting. If @ is not included in the delimiter set,
the access device does not support the 802.1X users that use @ as the domain name delimiter.
If a username string contains multiple configured delimiters, the leftmost delimiter is the domain
name delimiter. For example, if you configure @, /, and \ as delimiters, the domain name delimiter for
the username string 123/22\@abc is the forward slash (/).
The
cut connection user-name
user-name
and
display connection user-name
user-name
commands are not available for 802.1X users that use / or \ as the domain name delimiter. For more
information about the two commands, see "AAA configuration commands."
Examples
# Specify the characters @, /, and \ as domain name delimiters.
<Sysname> system-view
[Sysname] dot1x domain-delimiter @\/
dot1x guest-vlan
Use
dot1x guest-vlan
to configure an 802.1X guest VLAN for the specified or all ports. A guest
VLAN on a port accommodates users that have not performed 802.1X authentication. In the guest
VLAN, users can access a limited set of network resources, such as a software server, to download
anti-virus software and system patches.
Use
undo dot1x guest-vlan
to remove the 802.1X guest VLAN on the specified or all ports.
Syntax
In system view:
dot1x guest-vlan
guest-vlan-id
[
interface
interface-list
]
undo dot1x guest-vlan
[
interface
interface-list
]
In interface view:
dot1x guest-vlan
guest-vlan-id
undo dot1x guest-vlan
Default
No 802.1X guest VLAN is configured on a port.
Views
System view, Ethernet interface view
Default command level
2: System level