H3C S7500 Series Ethernet Switches Command Manual

Command Manual – 802.1x
H3C S7500 Series Ethernet Switches Chapter 1
802.1x Configuration Commands
1-8
interface-list: List of Ethernet ports, expressed as interface-list = { interface-name [ to
interface-name ] } & < 1-10 >. The interface-name argument is the port index of a port
and can be specified in this form: interface-name = { interface-type interface-num },
where interface-type specifies the type of a port and interface-num identifies the port
number. "&<1-10>" means that up to 10 port indexes/port index lists can be provided.
Description
Use the dot1x guest-vlan command to enable the Guest VLAN function for the
specified ports.
Use the undo dot1x guest-vlan command to disable the Guest VLAN function for
specified ports.
When being executed in system view, these two commands apply to all Ethernet ports
of the switch if you do not provide the interface-list argument. And if you specify the
interface-list argument, these commands apply to the specified Ethernet ports.
When being executed in Ethernet port view, these two commands apply to the current
Ethernet port only. In this case, the interface-list argument is not needed.
Caution:
z The Guest VLAN function is available only when the switch operates in a port-based
authentication mode.
z Only one Guest VLAN can be configured for each switch.
z The Guest VLAN function is unavailable when the dot1x dhcp-launch command is
configured on the switch, because the switch does not send authentication request
packets.
Related commands: name, vlan-assignment-mode.
Examples
# Specify the authentication method to be port-based authentication.
<H3C>system-view
System View: return to User View with Ctrl+Z.
[H3C] dot1x port-method portbased
# Enable the Guest VLAN function for all ports.
[H3C] dot1x guest-vlan 1