set protocols dot1x interface guest-vlan

The set protocols dot1x interface guest-vlan command configures a guest VLAN on an interface.

NOTE:

This command is supported from PICOS 2.11.16.

Command Syntax

set protocols dot1x interface <interface-name> guest-vlan <vlan-id>

Parameter

Parameter

Description

interface <interface-name>

Specifies the physical interface name. The value is a string.

guest-vlan <vlan-id>

Specifies the ID of a guest VLAN. The value is an integer that ranges from 1 to 4094.

By default there is no guest VLAN.

Usage Guidelines

If the 802.1X authentication has failed but the guest VLAN is configured, the user port will be added to the guest VLAN and the native VLAN ID will be changed to guest VLAN. The client can only access resources within the guest VLAN. If no guest VLAN is configured on the user port, the port will be kept in blocking state.

NOTE:

The guest VLAN function can take effect only when 802.1X authentication is enabled as the guest VLAN function is a sub-function module of 802.1X authentication.
The link type of the guest VLAN port should be trunk port.
The VLAN that is configured as the guest VLAN should already be created on the switch.
One guest VLAN can be specified on each interface.

Example

Configure a guest VLAN on interface ge-1/1/1.

admin@Xorplus# set protocols do1x interface ge-1/1/1 guest-vlan 10
admin@Xorplus# commit