Specifications
authentication force-authorized vlan
354
authentication force-authorized vlan
In dynamic VLAN mode of Web authentication and MAC-based authentication, and
port-based authentication (dynamic) for IEEE 802.1X authentication, set this command to
allocate a post-authentication VLAN when forced authentication is performed on the
applicable port.
Syntax
To set or change information:
authentication force-authorized vlan <VLAN ID>
To delete information:
no authentication force-authorized vlan
Input mode
(config-if)
Parameters
<VLAN ID>
Sets a MAC VLAN as the port-authentication VLAN that is assigned when forced
authentication is performed.
1. Default value when this parameter is omitted:
This parameter cannot be omitted.
2. Range of values:
See Specifiable values for parameters.
Note, however, that the default VLAN (
VLAN ID = 1) cannot be set.
Default behavior
The native VLAN of the applicable port is assigned as the post-authentication VLAN.
Impact on communication
None
When the change is applied
The change is applied immediately after setting values are changed.
Notes
1. This command is valid only when the authentication force-authorized enable
command is set.
2. When this command is set or deleted, a currently authenticated terminal or a user
operates in the VLAN that was accommodated by the previous setting. The values
set for this command take effect after re-authentication or the next authentication.
3. This functionality is not subject to legacy mode.
Related commands
authentication force-authorized enable
vlan mac-based