Users Guide

Security Commands 1107
User Guidelines
It is recommended that the user set the authentication timeout guest-vlan-
period to at least three times the dot1x timeout tx-period timer so that at
least three EAP Requests are sent, before assuming that the client is an
802.1X unaware client. An 802.1X unaware client is one that does not respond
to EAP-Request/Identity frames and does not send EAPOL-Start or EAP-
Response/Identity frames.
Example
The following example sets the 802.1X timeout guest vlan period to 100
seconds.
console(config)# authentication timeout guest-vlan-period 100
authentication event fail
Use the authentication event fail command in Interface Configuration mode
to specify the unauthenticated VLAN on a port. The VLAN must be defined
prior to use. The no form of the command sets the unauthenticated VLAN
ID to zero, which disables the authenticated VLAN on a port.
Syntax
authentication event fail action authorize vlan vlan-id
no authentication event fail action authorize vlan
• vlan-id — The ID of a valid VLAN to use for unauthenticated clients
(Range: 1-4093).
Default Configuration
The unauthenticated VLAN is disabled on the interface by default.
Command Mode
Interface Configuration (Ethernet) mode