Security Commands 987Command ModeInterface Configuration (Ethernet) modeUser GuidelinesIt is recommended that the user set the dot1x timeout guest-vlan-period to atleast three times the while timer so that at least three EAP Requests are sent,before assuming that the client is an 802.1X unaware client. An 802.1Xunaware client is one that does not respond to EAP-Request/Identity framesand does not send EAPOL-Start or EAP-Response/Identity frames.ExampleThe following example sets the 802.1X timeout guest vlan period to 100seconds.console(config)# dot1x timeout guest-vlan-period 100dot1x unauth-vlanUse the dot1x unauth-vlan command in Interface Configuration mode tospecify the unauthenticated VLAN on a port. The unauthenticated VLAN isthe VLAN to which supplicants that fail 802.1x authentication are assigned.Syntaxdot1x unauth-vlan vlan-idno dot1x unauth-vlan• vlan-id — The ID of a valid VLAN to use for unauthenticated clients(Range: 0-4093).Default ConfigurationThe unauthenticated VLAN is disabled on the interface by default.Command ModeInterface Configuration (Ethernet) mode
