R3303-HP HSR6800 Routers Security Command Reference

122
To delete a VLAN that has been configured as a guest VLAN, you must remove the guest VLAN
configuration first.
You can configure both an Auth-Fail VLAN and an 802.1X guest VLAN on a port.
Examples
# Specify VLAN 999 as the 802.1X guest VLAN for port GigabitEthernet 3/0/1
<Sysname> system-view
[Sysname] dot1x guest-vlan 999 interface gigabitethernet 3/0/1
# Specify VLAN 10 as the 802.1X guest VLAN for ports GigabitEthernet 3/0/2 to GigabitEthernet
3/0/5.
<Sysname> system-view
[Sysname] dot1x guest-vlan 10 interface gigabitethernet 3/0/2 to gigabitethernet 3/0/5
# Specify VLAN 7 as the 802.1X guest VLAN for all ports.
<Sysname> system-view
[Sysname] dot1x guest-vlan 7
# Specify VLAN 3 as the 802.1X guest VLAN for port GigabitEthernet 3/0/7.
<Sysname> system-view
[Sysname] interface gigabitethernet 3/0/7
[Sysname-GigabitEthernet3/0/7] dot1x guest-vlan 3
Related commands
• dot1x
• dot1x port-method
• dot1x multicast-trigger
• mac-vlan enable and display mac-vlan (Layer 2—LAN Switching Command Reference)
dot1x handshake
Use dot1x handshake to enable the online user handshake function. The function enables the device to
periodically send handshake messages to the client to check whether a user is online.
Use undo dot1x handshake to disable the function.
Syntax
dot1x handshake
undo dot1x handshake
Default
The function is enabled.
Views
Ethernet Interface view
Default command level
2: System level
Usage guidelines
The 802.1X proxy detection function depends on the online user handshake function. Enable handshake
before enabling proxy detection and disable proxy detection before disabling handshake.