Re: dot1x guest-vlan supplicant

From: John Edom (jedom123@gmail.com)
Date: Wed Dec 24 2008 - 11:49:31 ARST


what i understand, if requirement is like that if auth-fail vlan is not
configured and we want auth-fail device also go to guest vlan then we use
this global command. In that case these both commands will be configured
(interface level and globaly)

Please correct me if i am wrong.

Regards

On Wed, Dec 24, 2008 at 5:29 PM, GAURAV MADAN <gauravmadan1177@gmail.com>wrote:

> when in interface level ; you say :
>
> dot1x guest-vlan <>
>
> if the end device is non dot1x capable ; then it will be put in guest vlan
> .
> if device is dot1x capable and fails authentication ; it will not be
> allowed to access the network .
>
> Global command :
>
> dot1x guest-vlan supplicant
>
> it helps switch not to retain the history . i.e. if dot1x capable device
> fails the auth ; it will be put in guest vlan.
>
> HTH
> Gaurav Madan
>
> On Wed, Dec 24, 2008 at 2:15 PM, John Edom <jedom123@gmail.com> wrote:
>
>> Hi,
>>
>> is there any difference between config level "dot1x guest-vlan supplicant"
>> and interface level command other then normal logic that is in config mode
>> it will configured global? I tried to understand from doc but difficult.
>>
>> Regards
>>
>>
>> Blogs and organic groups at http://www.ccie.net
>>
>> _______________________________________________________________________
>> Subscription information may be found at:
>> http://www.groupstudy.com/list/CCIELab.html

Blogs and organic groups at http://www.ccie.net



This archive was generated by hypermail 2.1.4 : Thu Jan 01 2009 - 12:53:09 ARST