Administrator Guide

Security Commands 998
802.1x Advanced Features
dot1x guest-vlan
Use the dot1x guest-vlan command in Interface Configuration mode to set
the guest VLAN on a port. The VLAN must already have been defined. The
no form of this command sets the guest VLAN id to zero, which disables the
guest VLAN on a port.
Syntax
dot1x guest-vlan vlan-id
no dot1x guest-vlan
• vlan-id — The ID of a valid VLAN to use as the guest VLAN (Range: 0-
4093).
Default Configuration
The guest VLAN is disabled on the interface by default.
Command Mode
Interface Configuration (Ethernet) mode
User Guidelines
If configured, the guest VLAN is the VLAN to which 802.1X unaware clients
are assigned. Configure the guest VLAN before using this command.
The switch attempts authentication three times before assigning a supplicant
to the guest VLAN.
Example
The following example sets the guest VLAN on port 1/0/2 to VLAN 10.
console(config-if-Gi1/0/2)#dot1x guest-vlan 10
2CSNXXX_SWUM204.book Page 998 Monday, January 25, 2016 1:25 PM