Filter
Top Products
DES-7200 Configuration Guide Chapter 4 802.1x Configuration
4-46
Execute the following steps to configure IAB authentication with switching VLAN:
Command Function
DES-7200# configure terminal
Enter global configuration mode.
DES-7200(config)# interface <interface-id>
Enter interface configuration mode.
DES-7200(config-if)# dot1x critical vlan
<vlan-id>
Configure IAB authentication with switching
VLAN.
DES-7200(config-if)# end
Return to privileged mode.
DES-7200# show running-config
Display all configurations.
The following example shows how to configure Inaccessible Authentication Bypass:
DES-7200# configure terminal
DES-7200(config)# interface fa 0/1
DES-7200(config-if)# dot1x port-control auto
DES-7200(config-if)# dot1x critical
DES-7200(config-if)# dot1x critical vlan 100
Note
1. If there are already certain authenticated users on the port
before all RADIUS servers fail, new users are authorized to
access the network after servers have failed and if no
inaccessible VLAN is configured on the port. If IAB
authentication with inaccessible VLAN has been configured on
the server, new users won't be authorized to access network in
order to guarantee that the authenticated users have the priority
to use network.
2. If there are already normally authenticated users on the port
before all servers have failed, the port will remain the original
state and won't jump to the inaccessible VLAN if the servers are
failed during user's re-authentication.
3. After all users under the port are disconnected, the port will
automatically exit from the inaccessible VLAN.
4. If the inaccessible VLAN configured doesn't exist, the
inaccessible VLAN will be created automatically when entered
by the port and be removed automatically when exited by the
port.
5. The inaccessible VLAN doesn't support private VLAN, remote
VLAN and super VLAN (including SUB VLAN).