Dot1X Guest-Vlan Timeout - Cisco 300 Series Cli Manual

Stackable managed switches

Hide thumbs Also See for 300 Series:

Table of Contents

802. 1 X Commands

User Guidelines

The port cannot belong to the guest VLAN.

The guest VLAN and the WEB-Based authentication cannot be configured on a

port at the same time.

This command cannot be configured if the monitoring VLAN is enabled on the

The port is added to the guest VLAN as an egress untagged port.

If the authentication mode is single-host or multi-host, the value of PVID is set to

the guest VLAN_ID.

If the authentication mode is multi-sessions mode, the PVID is not changed and all

untagged traffic and tagged traffic not belonging to the unauthenticated VLANs

from unauthorized hosts are mapped to the guest VLAN.

If 802.1X is disabled, the port static configuration is reset.

See the User Guidelines of the

dot1x host-mode

command for more information.

The following example enables unauthorized users on gi 1 1 to access the guest

switchxxxxxx(config)#

interface gi11

switchxxxxxx(config-if)#

dot1x guest-vlan enable

dot1x guest-vlan timeout

Use the dot1x guest-vlan timeout Global Configuration mode command to set the

time delay between enabling 802.1X (or port up) and adding a port to the guest

VLAN. Use the no form of this command to restore the default configuration.

dot1x guest-vlan timeout

no dot1x guest-vlan timeout

OL-32830-01 Command Line Interface Reference Guide