HP 6125G HP 6125G & 6125G/XG Blade Switches Security Command Reference - Page 109
interface-list, interface-number, Layer 2, LAN Switching Command Reference, interface - switch commands
View all HP 6125G manuals
Add to My Manuals
Save this manual to your list of manuals |
Page 109 highlights
interface interface-list: Specifies a port list. The interface-list argument is in the format of interface-list = { interface-type interface-number [ to interface-type interface-number ] } & , where interface-type represents the port type, interface-number represents the port number, and & means that you can provide up to 10 ports or port ranges. The start port number must be smaller than the end number and the two ports must be of the same type. If no interface is specified, you configure an 802.1X guest VLAN for all Layer 2 Ethernet ports. Description Use dot1x guest-vlan to configure an 802.1X guest VLAN for the specified or all ports. Use undo dot1x guest-vlan to remove the 802.1X guest VLAN on the specified or all ports. By default, no 802.1X guest VLAN is configured on a port. You must enable 802.1X for an 802.1X guest VLAN to take effect. To have the 802.1X guest VLAN take effect, complete the following tasks: • Enable 802.1X both globally and on the interface. • If the port performs port-based access control, enable the 802.1X multicast trigger function. • If the port performs MAC-based access control, configure the MAC-based VLAN function on the port. When you change the access control method from MAC-based to port-based on a port that carries a guest VLAN, the mappings between MAC addresses and the 802.1X guest VLAN are removed. You can use the display mac-vlan command to display MAC-to-VLAN mappings. When you change the access control method from port-based to MAC-based on a port that is in a guest VLAN, the port is removed from the guest VLAN. To delete a VLAN that has been configured as a guest VLAN, you must remove the guest VLAN configuration first. Related commands: dot1x, dot1x port-method, and dot1x multicast-trigger; mac-vlan enable and display mac-vlan (Layer 2-LAN Switching Command Reference). Examples # Specify VLAN 999 as the 802.1X guest VLAN for port GigabitEthernet 1/0/1. system-view [Sysname] dot1x guest-vlan 999 interface gigabitethernet 1/0/1 # Specify VLAN 10 as the 802.1X guest VLAN for ports GigabitEthernet 1/0/2 to GigabitEthernet 1/0/5. system-view [Sysname] dot1x guest-vlan 10 interface gigabitethernet 1/0/2 to gigabitethernet 1/0/5 # Specify VLAN 7 as the 802.1X guest VLAN for all ports. system-view [Sysname] dot1x guest-vlan 7 # Specify VLAN 3 as the 802.1X guest VLAN for port GigabitEthernet 1/0/7. system-view [Sysname] interface gigabitethernet 1/0/7 [Sysname-GigabitEthernet1/0/7] dot1x guest-vlan 3 100