Planet IGSW-2840, Руководство пользователя

Страница: 471 / 671

User’s Manual of IGSW-2840
471
Example
The following
Example
enables dynamic VLAN assignment on port 1.
Console(config)#interface ethernet 1/1
Console(config-if)#network-access dynamic-vlan
Console(config-if)#
network-access guest-vlan
Use this command to assign all traffic on a port to a guest VLAN when network access (MAC authentication) or 802.1X
authentication is rejected. Use the no form of this command to disable guest VLAN assignment.
Syntax
network-access guest-vlan vlan-id
no network-access guest-vlan
Default Setting
Disabled
Command Mode
Interface Configuration
Command Usage
The VLAN to be used as the guest VLAN must be defined and set as active (see “vlan database” on page 4-225).
When used with 802.1X authentication, the intrusion-action must be set for “guest-vlan” to be effective (see “dot1x
intrusion-action”).
Example
Console(config)#interface ethernet 1/1
Console(config-if)#network-access guest-vlan 25
Console(config-if)#
mac-authentication reauth-time
Use this command to set the time period after which a connected MAC address must be re-authenticated. Use the no form of
this command to restore the default value.
Syntax
mac-authentication reauth-time seconds
no mac-authentication reauth-time
seconds -The reauthentication time period.
(Range: 120-1000000 seconds)