Dot1x guest-vlan – Allied Telesis AT-S95 CLI (AT-8000GS Series) User Manual
Page 386
Page 386
Allied Telesis
AT-8000GS Command Line Interface User’s Guide
Command Mode
Interface Configuration (VLAN) mode
User Guidelines
An access port cannot be a member in an unauthenticated VLAN.
The native VLAN of a trunk port cannot be an unauthenticated VLAN.
For a general port, the PVID can be an unauthenticated VLAN (although only tagged packets would be accepted
in the unauthorized state.)
Example
The following example enables access to the VLAN to unauthorized devices.
dot1x guest-vlan
The dot1x guest-vlan Interface Configuration mode command defines a guest VLAN. Use the no form of this
command to return to the default configuration.
Syntax
dot1x guest-vlan
no dot1x guest-vlan
Parameters
This command has no arguments or keywords.
Default Configuration
No VLAN is defined as a guest VLAN.
Command Mode
Interface Configuration (VLAN) mode
User Guidelines
Use the dot1x guest-vlan enable Interface (Ethernet) Configuration mode command to enable unauthorized
users on an interface to access the guest VLAN.
If the guest VLAN is defined and enabled, the port automatically joins the guest VLAN when the port is
unauthorized and leaves it when the port becomes authorized. To be able to join or leave the guest VLAN, the port
should not be a static member of the guest VLAN.
console(config)# interface vlan 5
console(config-if)# dot1x auth-not-req