536 Configuring 802.1X and Port-Based SecurityGuest-vlan Timeout............................. 90Server Timeout (secs).......................... 30MAB mode (configured).......................... DisabledMAB mode (operational)......................... DisabledAllowing RADIUS-Assigned VLANs and a Guest VLANThe following commands show how to configure the switch to acceptRADIUS-assigned VLANs and Guest VLANs. The RADIUS server can place aport in a particular VLAN based on the result of the authentication.This example assumes that the RADIUS server information and Guest VLAN(VLAN 100) have already been configured on the switch. If the RADIUS-assigned VLAN has not been created on the switch, the VLAN can bedynamically created.To configure the switch:1 Allow the switch to accept RADIUS-assigned VLANsconsole#configconsole(config)#aaa authorization network defaultradius2 Permit the switch to dynamically create a VLAN assigned by the RADIUSserver if it does not already exist on the switch.3 Set the guest VLAN on port 20 to VLAN 100. This commandautomatically enables the Guest VLAN Supplicant Mode on the interface.console#configureconsole(config)#interface gi1/0/20console(config-if-Gi1/0/20)#dot1x guest-vlan 100console(config-if-Gi1/020)# console#show dot1x advanced gi1/0/20Port Guest UnauthenticatedVLAN Vlan--------- --------- ---------------Gi1/0/20 100 DisabledNOTE: Define the VLAN before configuring an interface to use it as theguest VLAN.
