H3C Technologies H3C S7500E Series Switches - Manual (Page 113)

5-23
z The guest VLAN function and the free IP function in EAD fast deployment are mutually
exclusive on a port.
z If the traffic from a user-side device carries VLAN tags and the 802.1X authentication and
guest VLAN functions are configured on the access port, you are recommended to
configure different VLAN IDs for the voice VLAN, default VLAN of the port, and 802.1X
guest VLAN. This is to ensure the normal use of the functions.
z A super VLAN cannot be set as the guest VLAN. Similarly, a guest VLAN cannot be set as
the super VLAN. For information about super VLAN, see VLAN Configuration in the Layer 2
– LAN Switching Configuration Guide.
z Only Hybrid ports support MGV. When you configure a MGV on a Hybrid port, you need
configure the Hybrid port to permit packets of the MGV to pass through untagged.
Before configuring a guest VLAN, make sure that:
z The VLAN to be specified as the guest VLAN has been created.
z The port access control method is portbased, and the 802.1X multicast trigger function is
enabled if you want to configure a port-based guest VLAN.
z The port access control method is macbased and the MAC VLAN function is enabled on
the port if you want to configure a MAC-based guest VLAN. For how to configure the MAC
VLAN function, see VLAN Configuration in the Layer 2 – LAN Switching Configuration
Guide.
Follow these steps to configure a guest VLAN:
To do… Use the command… Remarks
Enter system view system-view —
In system view
dot1x guest-vlan guest-vlan-id
[ interface interface-list ]
interface interface-type
interface-number
Configure the
guest VLAN
for one or
more ports
In Ethernet
interface view
dot1x guest-vlan guest-vlan-id
Required
Use either approach.
By default, a port is configured
with no guest VLAN.
Different ports can be configured with different guest VLANs, but a port can be configured with
only one guest VLAN.