Dot1X Guest-Vlan - Cisco Catalyst 3550 Command Reference Manual

dot1x guest-vlan

dot1x guest-vlan
Use the dot1x guest-vlan interface configuration command to specify an active VLAN as an 802.1X
guest VLAN. Use the no form of this command to return to the default setting.
Syntax Description
vlan-id
Defaults No guest VLAN is configured.
Command Modes
Interface configuration
Command History Release
12.1(14)EA1
Usage Guidelines
When you configure a guest VLAN, clients that are not 802.1X-capable are put into the guest VLAN
when the server does not receive a response to its Extensible Authentication Protocol over LAN
(EAPOL) request/identity frame. Clients that are 802.1X-capable but fail authentication are not granted
access to the network.
Guest VLANs are supported on 802.1X ports in single-host mode and multiple-hosts mode.
Any VLAN can be configured as an 802.1X guest VLAN except RSPAN VLANs, voice VLANs, or
internal routed ports.
Examples
This example shows how to specify VLAN 5 as an 802.1X guest VLAN:
Switch(config-if)# dot1x guest-vlan 5
You can verify your settings by entering the show dot1x [interface interface-id] privileged EXEC
command.
Related Commands Command
show dot1x
interface-id]
Catalyst 3550 Multilayer Switch Command Reference
2-68
dot1x guest-vlan vlan-id
no dot1x guest-vlan
Specify an active VLAN as an 802.1X guest VLAN. The range is 1 to 4094.
Modification
This command was first introduced.
Description
[interface Displays 802.1X status for the specified interface.
Chapter 2 Cisco IOS Commands
78-11195-09