Reference Guide

170 | 802.1X
www.dell.com | support.dell.com
To disable the guest VLAN, use the no dot1x guest-vlan vlan-id command.
Parameters
Defaults
Not configured
Command Modes
CONFIGURATION (conf-if-interface-slot/port)
Command
History
Usage
Information
802.1X authentication is enabled when an interface is connected to the switch. If the host fails
to respond within a designated amount of time, the authenticator places the port in the guest
VLAN.
If a device does not respond within 30 seconds, it is assumed that the device is not 802.1X
capable. Therefore, a guest VLAN is allocated to the interface and authentication, for the
device, will occur at the next re-authentication interval (dot1x reauthentication).
If the host fails authentication for the designated amount of times, the authenticator places the
port in authentication failed VLAN (dot1x auth-fail-vlan).
Related
Commands
dot1x host-mode
c e s
Enable single-host or multi-host authentication.
Syntax
dot1x host-mode {single-host | multi-host | multi-auth}
Parameters
Defaults
single-host
vlan-id Enter the VLAN Identifier.
Range: 1 to 4094
Version 8.3.12.0 Introduced on the S4810.
Version 7.6.1.0 Introduced on C-Series, E-Series, and S-Series
Note: Layer 3 portion of guest VLAN and authentication fail VLANs can be created
regardless if the VLAN is assigned to an interface or not. Once an interface is
assigned a guest VLAN (which has an IP address), then routing through the guest
VLAN is the same as any other traffic. However, interface may join/leave a VLAN
dynamically.
dot1x auth-fail-vlan Configure an authentication failure VLAN.
dot1x reauthentication Enable periodic re-authentication of the client.
dot1x reauth-max Configure the maximum number of times to re-authenticate a port before
it becomes unauthorized.
single-host
Enable single-host authentication.
multi-host
Enable multi-host authentication.
multi-auth
Enable multi-supplicant authentication.