Reference Guide

dot1x critical-vlan
Configure critical-VLAN for users or devices when authentication server is not reachable.
C9000 Series
Syntax
[no] dot1x critical-vlan vlan-id
Parameters
vlan-id Enter the VLAN identifier. The VLAN-ID range is from 1 to
4094.
Defaults Not Configured.
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms,
refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version Description
9.9(0.0) Introduced on the C9000 Series.
Usage Information
The dot1x critical-vlan command configures critical VLAN for the interface.
If the authentication server is not reachable or not responding, the authenticator
places the port or the supplicant in critical VLAN within the first attempt.
Example
Dell(conf)#show dot1x interface ten gigabit ethernet 0/41
802.1x information on Te 0/41:
-----------------------------
Dot1x Status: Enable
Port Control: AUTO
Port Auth Status: AUTHORIZED (CRITICAL-VLAN)
Re-Authentication: Enable
Untagged VLAN id: 400
Guest VLAN: Enable
Guest VLAN id: 400
Auth-Fail VLAN: Enable
Auth-Fail VLAN id: 400
Auth-Fail Max-Attempts: 3
Critical VLAN: Enable
Critical VLAN id: 400
Mac-Auth-Bypass: Disable
Mac-Auth-Bypass Only: Disable
Tx Period: 30 seconds
Quiet Period: 60 seconds
ReAuth Max: 2
Supplicant Timeout: 30 seconds
Server Timeout: 30 seconds
Re-Auth Interval: 60 seconds
Max-EAP-Req: 2
Host Mode: SINGLE_HOST
802.1X
229