PLANET XGS3-24042 - Manual (Page 970)

48-6
Default Settings:
There is no 802.1x guest-vlan function on the port.
User Guide:
The access device will add the port into Guest VLAN if there is no supplicant getting authenticated
successfully in a certain stretch of time because of lacking exclusive authentication supplicant
system or the version of the supplicant system being too low.
In Guest VLAN, users can get 802.1x supplicant system software, update supplicant system or
update some other applications (such as anti-virus software, the patches of operating system).
When a user of a port within Guest VLAN starts an authentication, the port will remain in Guest
VLAN in the case of a failed authentication. If the authentication finishes successfully, there are two
possible results:
 The authentication server assigns an Auto VLAN, causing the port to leave Guest VLAN to join
the assigned Auto VLAN. After the user gets offline, the port will be allocated back into the
specified Guest VLAN.
 The authentication server assigns an Auto VLAN, then the port leaves Guest VLAN and joins
the specified VLAN. When the user becomes offline, the port will be allocated to the specified
Guest VLAN again.
Attention:
 There can be different Guest VLAN set on different ports, while only one Guest VLAN is
allowed on one port.
 Only when the access control mode is portbased, the Guest VLAN can take effect. If the
access control mode of the port is macbased or userbased, the Guest VLAN can be
successfully set without taking effect.
Examples：
Set Guest-VLAN of port Ethernet1/0/3 as VLAN 10.
Switch(Config-If-Ethernet1/0/3)#dot1xguest-vlan 10
48.9 dot1x macfilter enable
Command:
dot1x macfilter enable
no dot1x macfilter enable
Function:
Enables the dot1x address filter function in the switch; the "no dot1x macfilter enable" command
disables the dot1x address filter function.
Command mode:
Global Mode