Allied Telesis AT-FS970M Series - Manual (Page 1076)

Chapter 70: 802.1x Port-based Network Access Control Commands
1076
AUTH GUEST-VLAN
Syntax
auth guest-vlan vid
Parameters
vid
Specifies the ID number of a VLAN that is the guest VLAN of an
authenticator port. You can enter just one VID.
Mode
Port Interface mode
Description
Use this command to specify the VID of the VLAN that acts as the guest
VLAN of an authenticator port. An authenticator port remains in a guest
VLAN until a supplicant successfully logs on, at which point, it is moved to
a configured VLAN; or if the dynamic VLAN setting is enabled, it will be
moved to the VLAN specified in a supplicant’s account on the RADIUS
server.
A port must already be designated as an authenticator port before you can
use this command.
To remove the VID of a guest VLAN from an authenticator port, refer to
“NO AUTH GUEST-VLAN” on page 1104.
Example
This example designates ports 1.0.1 to 1.0.4 as authenticator ports and
specifies VID 12 as the guest VLAN:
awplus> enable
awplus# configure terminal
awplus(config)# interface port1.0.1-port1.0.4
awplus(config-if)# dot1x port-control auto
awplus(config-if)# auth guest-vlan 12