Specifications

mac-authentication vlan
533
mac-authentication vlan
Sets the VLAN IDs of VLANs to be switched dynamically after legacy mode authentication.
If this command is not set, no VLANs are switched after legacy-mode authentication.
Syntax
To set or change information:
mac-authentication vlan <VLAN ID list>
To delete information:
no mac-authentication vlan <VLAN ID list>
Input mode
(config)
Parameters
<VLAN ID list>
Sets the VLAN ID list of MAC VLANs to be switched after authentication.
1. Default value when this parameter is omitted:
This parameter cannot be omitted.
2. Range of values:
For details about how to set <VLAN ID list> and the specifiable values, see
Specifiable values for parameters. Note that the default VLAN (
VLAN ID = 1)
cannot be set.
Default behavior
No VLANs are switched dynamically after legacy-mode authentication.
Impact on communication
If VLANs are deleted by using this command, authentication of authenticated terminals
registered in the VLANs you have deleted is canceled.
When the change is applied
The change is applied immediately after setting values are changed.
Notes
1. All MAC-based authentication settings take effect when the mac-authentication
system-auth-control command is set.
2. See Table 24-1 Configuration commands and MAC-based authentication modes for
the authentication mode in which the command's settings are operable.
3. All VLAN IDs you have set must be set for a MAC VLAN.
4. If at least one of the following commands is set for a Switch, this command cannot be
set:

authentication multi-step

dot1x authentication

mac-authentication authentication

web-authentication authentication