HP E4510-48G, Справочник по командам

Страница: 699 / 1334

4-7
interface interface-list : Specifies a port list. The interface-list argument is in the format of interface-list
= { interface-type interface-number [ to interface-type interface-number ] } & <1-10>, where
interface-type represents the port type, interface-number represents the port number, and & <1-10>
means that you can provide up to 10 port indexes/port index lists for this argument. The start port
number must be smaller than the end number and the two ports must be of the same type.
Description
Use the dot1x guest-vlan command to configure the guest VLAN for specified or all ports.
Use the undo dot1x guest-vlan command to remove the guest VLAN(s) configured for specified or all
ports.
By default, a port is configured with no guest VLAN.
Currently, on the S4510G series Ethernet switches, a guest VLAN can be only a port-based guest
VLAN (PGV), which is supported on a port that uses the access control method of portbased .
Note that:
z
In system view, this command configures a guest VLAN for all Layer 2 Ethernet ports if you do not
specify the interface-list argument, and configures a guest VLAN for specified ports if you specify
the interface-list argument.
z
In interface view, you cannot specify the interface-list argument and can only configure guest
VLAN for the current port.
z
You must enable 802.1X for a guest VLAN to take effect.
z
You must enable the 802.1X multicast trigger function for a PGV to take effect.
z
After an PGV takes effect, if you change the port access method from portbased to macbased ,
the port will leave the guest VLAN.
z
You are not allowed to delete a VLAN that is configured as a guest VLAN. To delete such a VLAN,
you need to remove the guest VLAN configuration first.
z
You cannot configure both the guest VLAN function and the free IP function on a port.
Related commands: dot1x ; dot1x port-method ; dot1x multicast-trigger ; mac-vlan enable , and
display mac-vlan in VLAN Commands in the Access Volume .
Examples
# Specify port GigabitEthernet 1/0/1 to use VLAN 999 as its guest VLAN.
<Sysname> system-view
[Sysname] dot1x guest-vlan 999 interface GigabitEthernet 1/0/1
# Specify ports GigabitEthernet 1/0/2 to GigabitEthernet 1/0/5 to use VLAN 10 as its guest VLAN.
<Sysname> system-view
[Sysname] dot1x guest-vlan 10 interface GigabitEthernet 1/0/2 to GigabitEthernet 1/0/5
# Specify all ports to use VLAN 7 as their guest VLAN.
<Sysname> system-view
[Sysname] dot1x guest-vlan 7
# Specify port GigabitEthernet 1/0/7 to use VLAN 3 as its guest VLAN.
<Sysname> system-view
[Sysname] interface GigabitEthernet 1/0/7
[Sysname-GigabitEthernet1/0/7] dot1x guest-vlan 3