From: GAURAV MADAN (gauravmadan1177@gmail.com)
Date: Wed Dec 24 2008 - 12:00:22 ARST
yes .... this is what i understand
int f0/1
dot1x auth-fail vlan 10
dot1x guest-vlan 10
if non-dot1x capable client : go to vlan 10
if auth fails : go to vlan 10
Next option
========
dot1x guest-vlan supplicant
int f0/0
dot1x guest-vlan 10
if authentoion fail : go to guest vlan
if non dot1x capable client : go to guest vlan
PLease correct us .. if we r hitting wrong roads .
On Wed, Dec 24, 2008 at 7:19 PM, John Edom <jedom123@gmail.com> wrote:
> what i understand, if requirement is like that if auth-fail vlan is not
> configured and we want auth-fail device also go to guest vlan then we use
> this global command. In that case these both commands will be configured
> (interface level and globaly)
>
> Please correct me if i am wrong.
>
> Regards
>
>
> On Wed, Dec 24, 2008 at 5:29 PM, GAURAV MADAN <gauravmadan1177@gmail.com>wrote:
>
>> when in interface level ; you say :
>>
>> dot1x guest-vlan <>
>>
>> if the end device is non dot1x capable ; then it will be put in guest vlan
>> .
>> if device is dot1x capable and fails authentication ; it will not be
>> allowed to access the network .
>>
>> Global command :
>>
>> dot1x guest-vlan supplicant
>>
>> it helps switch not to retain the history . i.e. if dot1x capable device
>> fails the auth ; it will be put in guest vlan.
>>
>> HTH
>> Gaurav Madan
>>
>> On Wed, Dec 24, 2008 at 2:15 PM, John Edom <jedom123@gmail.com> wrote:
>>
>>> Hi,
>>>
>>> is there any difference between config level "dot1x guest-vlan
>>> supplicant"
>>> and interface level command other then normal logic that is in config
>>> mode
>>> it will configured global? I tried to understand from doc but difficult.
>>>
>>> Regards
>>>
>>>
>>> Blogs and organic groups at http://www.ccie.net
>>>
>>> _______________________________________________________________________
>>> Subscription information may be found at:
>>> http://www.groupstudy.com/list/CCIELab.html
Blogs and organic groups at http://www.ccie.net
This archive was generated by hypermail 2.1.4 : Thu Jan 01 2009 - 12:53:09 ARST