Reference Guide

802.1X | 113
Figure 6-13. Configuring an Authentication-fail VLAN
View your configuration using the command show config from INTERFACE mode, as shown in the
example in Configuring a Guest VLAN, or using the command
show dot1x interface command from EXEC
Privilege mode as shown in the example below.
Figure 6-14. Viewing Guest and Authentication-fail VLAN Configurations
Dell (conf-if-te-2/1)#dot1x guest-vlan 200
Dell (conf-if-te 2/1)#show config
!
interface TenGigabitEthernet 2/1
switchport
dot1x authentication
dot1x guest-vlan 200
no shutdown
Dell (conf-if-te-2/1)#
Dell (conf-if-te-2/1)#dot1x auth-fail-vlan 100 max-attempts 5
Dell (conf-if-te-2/1)#show config
!
interface TenGigabitEthernet 2/1
switchport
dot1x authentication
dot1x guest-vlan 200
dot1x auth-fail-vlan 100 max-attempts 5
no shutdown
Dell (conf-if-te-2/1)#
Dell (conf-if-te 2/1)#dot1x port-control force-authorized
Dell (conf-if-te 2/1)#show dot1x interface TenGigabitEthernet 2/1
802.1x information on Te 2/1:
-----------------------------
Dot1x Status: Enable
Port Control: FORCE_AUTHORIZED
Port Auth Status: UNAUTHORIZED
Re-Authentication: Disable
Untagged VLAN id: None
Guest VLAN: Disabled
Guest VLAN id: 200
Auth-Fail VLAN: Disabled
Auth-Fail VLAN id: 100
Auth-Fail Max-Attempts: 5
Tx Period: 90 seconds
Quiet Period: 120 seconds
ReAuth Max: 10
Supplicant Timeout: 15 seconds
Server Timeout: 15 seconds
Re-Auth Interval: 7200 seconds
Max-EAP-Req: 10
Auth Type: SINGLE_HOST
Auth PAE State: Initialize
Backend State: Initialize