802.1x Client Version Checking Configuration 401When the Guest VLAN function is enabled:■ The switch broadcasts active authentication packets to all 802.1x-enabled ports.■ The switch adds the ports that do not return response packets to Guest VLANWhen the maximum number of authentication retries is reached.■ Users belonging to the Guest VLAN can access the resources of the Guest VLANwithout being authenticated. But they need to be authenticated before accessingexternal resources.Prerequisites■ The ports operate in port-based authentication mode.■ The VLAN specified to be the Guest VLAN already exists.Guest VLANConfigurationConfiguring Guest VLAN in system viewConfigure Guest VLAN inEthernet port viewThe Guest VLAN function is available only when the switch operates in the port-basedauthentication mode.Only one Guest VLAN can be configured for a switch.Supplicant systems that are not authenticated, fail to pass the authentication, or areoffline belong to Guest VLANs.Guest VLANConfiguration ExampleNetwork requirements■ Create VLAN 2.■ Configure Ethernet1/0/1 port to operate in port-based authentication mode.■ Configure Guest VLAN for Ethernet1/0/1 port.Table 426 Configure Guest VLAN in system viewOperation Command DescriptionEnter system view system-view —Configure Guest VLANfor specified portsdot1x guest-vlan vlan-id [interface interface-list ]RequiredThis operation applies to all portsof the switch if you do not providethe interface-list argument. And ifyou specify the interface-listargument, the operation applies tothe specified Ethernet ports.Table 427 Configure Guest VLAN in Ethernet port viewOperation Command DescriptionEnter system view system-view —Enter Ethernet port view interface interface-typeinterface-num—Configure Guest VLANfor the portdot1x guest-vlan vlan-id RequiredThis operation configures GuestVLAN for the current port only.
