R2511-HP MSR Router Series Security Command Reference(V5)

128
Default
The access device supports only the at sign (@) delimiter for 802.1X users.
Views
System view
Default command level
2: System level
Parameters
string: Specifies a set of 1 to 16 domain name delimiters for 802.1X users. No space is required between
delimiters. Available delimiters include the at sign (@), backslash (/), and forward slash (\).
Usage guidelines
The delimiter set you configured overrides the default setting. If @ is not included in the delimiter set, the
access device does not support the 802.1X users that use @ as the domain name delimiter.
If a username string contains multiple configured delimiters, the leftmost delimiter is the domain name
delimiter. For example, if you configure @, /, and \ as delimiters, the domain name delimiter for the
username string 123/22\@abc is the forward slash (/).
The cut connection user-name user-name and display connection user-name user-name commands are
not available for 802.1X users that use / or \ as the domain name delimiter. For more information about
the two commands, see "AAA configuration commands."
Examples
# Specify the characters @, /, and \ as domain name delimiters.
<Sysname> system-view
[Sysname] dot1x domain-delimiter @\/
dot1x guest-vlan
Use dot1x guest-vlan to configure an 802.1X guest VLAN for the specified or all ports. A guest VLAN on
a port accommodates users that have not performed 802.1X authentication. In the guest VLAN, users can
access a limited set of network resources, such as a software server, to download anti-virus software and
system patches.
Use undo dot1x guest-vlan to remove the 802.1X guest VLAN on the specified or all ports.
Syntax
In system view:
dot1x guest-vlan guest-vlan-id [ interface interface-list ]
undo dot1x guest-vlan [ interface interface-list ]
In interface view:
dot1x guest-vlan guest-vlan-id
undo dot1x guest-vlan
Default
No 802.1X guest VLAN is configured on a port.
Views
System view, Ethernet interface view