3Com S7902E Command Reference Manual - page 1823
1-7
Parameters
guest-vlan-id
: ID of the VLAN to be specified as the guest VLAN, in the range 1 to 4094. It must already
exist.
interface interface-list
: Specifies a port list. The
interface-list
argument is in the format of
interface-list
=
{
interface-type
interface-number
[
to
interface-type
interface-number
] } & , where
interface-type
represents the port type,
interface-number
represents the port number, and & means that you
can provide up to 10 port indexes/port index lists for this argument. The start port number must be
smaller than the end number and the two ports must be of the same type.
Description
Use the
dot1x guest-vlan
command to configure the guest VLAN for specified or all ports.
Use the
undo dot1x guest-vlan
command to remove the guest VLAN(s) configured for specified or all
ports.
By default, a port is configured with no guest VLAN.
Note that:
z
In system view, this command configures a guest VLAN for all Layer 2 Ethernet ports if you do not
specify the
interface-list
argument, and configures a guest VLAN for specified ports if you specify
the
interface-list
argument.
z
In interface view, you cannot specify the
interface-list
argument and can only configure guest VLAN
for the current port.
z
You must enable 802.1X for a guest VLAN to take effect.
z
You must enable the 802.1X multicast trigger function for a guest VLAN to take effect.
z
When the port access control method is set to
portbased
, you can specify a tagged VLAN as the
guest VLAN of a Hybrid port, but the guest VLAN does not take effect. If the guest VLAN of a Hybrid
port is in operation, you cannot configure the guest VLAN to carry VLAN tag.
z
A super VLAN cannot be set as the guest VLAN. Similarly, a guest VLAN cannot be set as the
super VLAN. For information about super VLAN, refer to
VLAN Configuration
in the
Access
Volume
.
z
You are not allowed to delete a VLAN that is configured as a guest VLAN. To delete such a VLAN,
you need to remove the guest VLAN configuration first.
z
You cannot configure both the guest VLAN function and the free IP function on a port.
Related commands:
dot1x
;
dot1x
port-method
;
dot1x multicast-trigger
;
mac-vlan enable
, and
display mac-vlan
in
VLAN Commands
in the
Access Volume
.
Examples
# Specify port GigabitEthernet 2/0/1 to use VLAN 999 as its guest VLAN.
[Sysname] dot1x guest-vlan 999 interface GigabitEthernet 2/0/1
# Specify ports GigabitEthernet 2/0/2 to GigabitEthernet 2/0/5 to use VLAN 10 as its guest VLAN.
[Sysname] dot1x guest-vlan 10 interface GigabitEthernet 2/0/2 to GigabitEthernet 2/0/5
# Specify all ports to use VLAN 7 as their guest VLAN.
[Sysname] dot1x guest-vlan 7