1-18Enabling DHCP-triggered AuthenticationAfter performing the following configuration, 802.1x allows running DHCP on access users, and usersare authenticated when they apply for dynamic IP addresses through DHCP.Follow these steps to enable DHCP-triggered authentication:To do... Use the command... RemarksEnter system view system-view —Enable DHCP-triggeredauthentication dot1x dhcp-launchRequiredBy default, DHCP-triggeredauthentication is disabled.Configuring Guest VLANFollow these steps to configure guest VLAN:To do... Use the command... RemarksEnter system view system-view —Configure the access controlmethod of ports dot1x port-method portbasedRequiredThe default access controlmethod on a port isMAC-based. That is, themacbased keyword is used bydefault.In systemviewdot1x guest-vlan vlan-id[ interface interface-list ]interface interface-typeinterface-numberdot1x guest-vlan vlan-idEnable theguest VLANfunction In port viewquitRequiredBy default, the guest VLANfunction is disabled.Caution:z The guest VLAN function is available only when the switch operates in the port-based accesscontrol mode.z Only one guest VLAN can be configured for each switch.z The guest VLAN function cannot be implemented if you configure the dot1x dhcp-launchcommand on the switch to enable DHCP-triggered authentication. This is because the switch doesnot send authentication packets in that case.Configuring 802.1x Re-AuthenticationFollow these steps to enable 802.1x re-authentication:
