enable netlogin dot1x guest-vlan ports
ExtremeWare XOS 11.5 supports only the Summit X450 family of switches and the BlackDiamond 8800 series switch.
ExtremeWare XOS 11.5 Command Reference Guide
1083
enable netlogin dot1x guest-vlan ports
enable netlogin dot1x guest-vlan ports [all | <ports>]
Description
Enables the guest VLAN on the specified 802.1x netlogin ports.
Syntax Description
Default
Disabled.
Usage Guidelines
A guest VLAN provides limited or restricted network access if a supplicant does not respond to the
802.1x authentication requests sent by the switch. You configure a guest VLAN only on netlogin ports
with 802.1x enabled; movement to a guest VLAN is not supported on netlogin ports with MAC-based
or web-based authentication. 802.1x must be the only authentication method enabled on the port for
movement to guest VLAN. A port always moves untagged into the guest VLAN.
By default, the switch attempts to authenticate the supplicant every 30 seconds for a maximum of three
tries. If the supplicant does not respond to the authentication requests, the client moves to the guest
VLAN. The number of authentication attempts is not a user-configured parameter.
To modify the supplicant response timer, use the following command and specify the
supp-resp-
timeout
parameter:
configure netlogin dot1x timers [{server-timeout <server_timeout>} {quiet-period
<quiet_period>} {reauth-period <reauth_period>} {supp-resp-timeout
<supp_resp_timeout>}]
Before you can enable the guest VLAN on the specified ports, you must create the guest VLAN. To
create the guest VLAN, use the following command:
configure netlogin dot1x guest-vlan <vlan_name>
Example
The following command enables the guest VLAN on all ports:
enable netlogin dot1x guest-vlan ports all
all
Specifies all ports included in the guest VLAN.
ports
Specifies one or more ports included in the guest VLAN.
