Cisco Catalyst 4500 Series Configuration Manual page 265

Chapter 2 Cisco IOS Commands for the Catalyst 4500 Series Switches
dot1x guest-vlan supplicant
To place an 802.1X-capable supplicant (host) into a guest VLAN, use the dot1x guest-vlan supplicant
global configuration command. To return to the default setting, use the no form of this command.
Syntax Description
This command has no arguments or keywords.
Command Default 802.1X-capable hosts are not put into a guest VLAN.
Command Modes Global configuration mode
Command History Release
12.2(25)EWA
Usage Guidelines With Cisco Release 12.2(25) EWA, you can use the dot1x guest-vlan supplicant command to place an
802.1X-capable host into a guest VLAN. Prior to Cisco Release 12.2(25)EWA, you could only place
non-802.1X capable hosts into a guest VLAN.
When guest VLAN supplicant behavior is enabled, the Catalyst 4500 series switch does not maintain
EAPOL packet history. The switch allows clients that fail 802.1X authentication to access a guest
VLAN, whether or not EAPOL packets have been detected on the interface.
Examples
The following example shows how to place an 802.1X-capable supplicant (host) into a guest VLAN:
Switch# configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
Switch(config)# dot1x guest-vlan supplicant
Switch(config)# end
Switch#
Related Commands Command
dot1x system-auth-control
show dot1x
dot1x quest-vlan supplicant
no dot1x quest-vlan supplicant
Modification
This command was introduced on the Catalyst 4500 series switch.
Catalyst 4500 Series Switch Cisco IOS Command Reference—Release XE 3.9.xE and 15.2(5)Ex
Description
Enables 802.1X authentication on the switch.
Displays dot1x information.
dot1x guest-vlan supplicant
2-227