From: louis john (west_coast@inbox.com)
Date: Tue Jul 03 2007 - 20:38:39 ART
Folks,
Can you please correct my answer to the following question :
I have IEEE clients connected to my switch port, I am trying to authenticate them through DOT1X protocol using radius server, I want to put the unauthenticated clients in the guest vlan 345
My config
aaa new-model
authentication login default none
aaa authentication dot1x default group radius
dot1x system-auth-control
interface range f1/0/1 - 48
switchport mode access
dot1x guest-vlan 345
Now should I have to also mention "dot1x guest-vlan supplicant" in the global configuration as this is a hidden command in 3750 switches as we usually do on 3550 switches.
Now I believe that if I put this command, then the Unauthenticated IEEE capable clients will be moved to guest vlan.
I appreciate your feedback.
This archive was generated by hypermail 2.1.4 : Sat Aug 18 2007 - 08:17:39 ART