C613-50170-01 Rev B
Command Reference for x510 Series
1727
AlliedWare Plus™ Operating System - Version 5.4.7-1.x
A
UTHENTICATION
C
OMMANDS
AUTH
GUEST
-
VLAN
FORWARD
auth guest-vlan forward
Overview
Use this command to enable packet forwarding from the Guest VLAN to a
destination IP address or subnet. If this command is configured, the device can
lease DHCP addresses and accept access to a limited part of your network. Also,
when using NAP authentication, the supplicant can log on to a domain controller
to gain certification.
Use the
no
variant of this command to disable packet forwarding from the Guest
VLAN to a destination IP address or subnet.
Syntax
auth guest-vlan forward {
<ip-address>
|
<ip-address/mask>
}
[dns|tcp
<1-65535>
|udp
<1-65535>
]
no auth guest-vlan forward {
<ip-address>
|
<ip-address/mask>
}
[dns|tcp
<1-65535>
|udp
<1-65535>
]
Default
Forwarding is disabled by default.
Mode
Interface Configuration mode for a specified switch port, or Authentication Profile
mode
Usage
Before using this command, you must configure the guest VLAN with the
Example
To enable packet forwarding from the guest VLAN to the destination IP address on
interface port1.0.2, use the commands:
awplus#
configure terminal
awplus(config)#
interface port1.0.2
awplus(config-if)#
auth guest-vlan forward 10.0.0.1
To enable forwarding of DNS packets from the guest VLAN to the destination IP
address on interface port1.0.2, use the commands:
awplus#
configure terminal
awplus(config)#
interface port1.0.2
awplus(config-if)#
auth guest-vlan forward 10.0.0.1 dns
Parameter
Description
<ip-address>
<ip-address/
mask>
The IP address or subnet to which the guest VLAN can forward
packets, in dotted decimal notation
dns
Enable forwarding of DNS packets
tcp <
1-65535
>
Enable forwarding of packets for the specified TCP port number
udp <
1-65535
>
Enable forwarding of packets for the specified UDP port number
