Users Guide

Security Commands 1026
• vlan-id — The ID of a valid VLAN to use as the guest VLAN (Range: 1-
4093).
Default Configuration
The guest VLAN is disabled on the interface by default.
Command Mode
Interface Configuration (Ethernet) mode
User Guidelines
If configured, the guest VLAN is the VLAN to which 802.1X unaware clients
are assigned. Configure the guest VLAN before using this command.
By default, the switch retries authentication one time before assigning a
supplicant to the guest VLAN.
Example
The following example sets the guest VLAN on port 1/0/2 to VLAN 10.
console(config-if-Gi1/0/2)#dot1x guest-vlan 10
dot1x timeout guest-vlan-period
Use the dot1x timeout guest-vlan-period command in Interface
Configuration mode to set the number of seconds that the switch waits
before authorizing the client if the client is an 802.1X unaware client. Use the
no form of the command to return the timeout to the default value.
Syntax
dot1x timeout guest-vlan-period seconds
no dot1x timeout guest-vlan-period
• seconds — Time in seconds that the switch waits before authorizing the
client if the client is a 802.1X unaware client. Range 1-300.
Default Configuration
The switch remains in the quiet state for 90 seconds.