Installation manual

4-152
SIGNAMAX LLC • www.signamax.eu
Example
The following example enables dynamic VLAN assignment on port 1.
network-access guest-vlan
Use this command to assign all traffic on a port to a guest VLAN when network access
(MAC authentication) or 802.1x authentication is rejected. Use the no form of this
command to disable guest VLAN assignment.
Syntax
network-access guest-vlan vlan-id
no network-access guest-vlan
vlan-id - VLAN ID (Range: 1-4094)
Default Setting
Disabled
Command Mode
Interface Configuration
Command Usage
• The VLAN to be used as the guest VLAN must be defined and set as active (“vlan
database” on page 4-241).
• When used with 802.1X authentication, the intrusion-action must be set for
“guest-vlan” to be effective (see “dot1x intrusion-action” on page 4-140).
Example
mac-authentication reauth-time
Use this command to set the time period after which a connected MAC address must be
re-authenticated. Use the no form of this command to restore the default value.
Syntax
mac-authentication reauth-time seconds
no mac-authentication reauth-time
seconds - The reauthentication time period.
(Range: 120-1000000 seconds)
Console(config)#interface ethernet 1/1
Console(config-if)#network-access dynamic-vlan
Console(config-if)#
Console(config)#interface ethernet 1/1
Console(config-if)#network-access guest-vlan 25
Console(config-if)#