disable netlogin dot1x guest-vlan ports
ExtremeWare XOS 11.5 supports only the Summit X450 family of switches and the BlackDiamond 8800 series switch.
ExtremeWare XOS 11.5 Command Reference Guide
1077
disable netlogin dot1x guest-vlan ports
disable netlogin dot1x guest-vlan ports [all | <ports>]
Description
Disables the guest VLAN on the specified 802.1x netlogin ports.
Syntax Description
Default
Disabled.
Usage Guidelines
A guest VLAN provides limited or restricted network access if a supplicant does not respond to the
802.1x authentication requests sent by the switch. You configure a guest VLAN only on netlogin ports
with 802.1x enabled; movement to a guest VLAN is not supported on netlogin ports with MAC-based
or web-based authentication. 802.1x must be the only authentication method enabled on the port for
movement to guest VLAN. A port always moves untagged into the guest VLAN.
By default, the switch attempts to authenticate the supplicant every 30 seconds for a maximum of three
tries. If the supplicant does not respond to the authentication requests, the client moves to the guest
VLAN. The number of authentication attempts is not a user-configured parameter.
To specify the supplicant response timer, use the following command and specify the
supp-resp-
timeout
parameter:
configure netlogin dot1x timers [{server-timeout <server_timeout>} {quiet-period
<quiet_period>} {reauth-period <reauth_period>} {supp-resp-timeout
<supp_resp_timeout>}]
Example
The following command disables the guest VLAN on all ports:
disable netlogin dot1x guest-vlan ports all
History
This command was first available in ExtremeWare XOS 11.2.
all
Specifies all ports included in the guest VLAN.
ports
Specifies one or more ports included in the guest VLAN.
