From: John Edom (jedom123@gmail.com)
Date: Wed Dec 24 2008 - 12:18:28 ARST
actually what i found command "dot1x auth-fail vlan" command is introduce in
newer version. I have 3750 with c3750-ipbase-mz.122-25.SEB4 and don't have
this command. so i only have second option. Anyhow i got idea and thanks for
explaining.
Regards
On Wed, Dec 24, 2008 at 6:00 PM, GAURAV MADAN <gauravmadan1177@gmail.com>wrote:
> yes .... this is what i understand
>
> int f0/1
> dot1x auth-fail vlan 10
> dot1x guest-vlan 10
>
> if non-dot1x capable client : go to vlan 10
> if auth fails : go to vlan 10
>
> Next option
> ========
>
> dot1x guest-vlan supplicant
> int f0/0
> dot1x guest-vlan 10
>
> if authentoion fail : go to guest vlan
> if non dot1x capable client : go to guest vlan
>
>
> PLease correct us .. if we r hitting wrong roads .
>
>
>
> On Wed, Dec 24, 2008 at 7:19 PM, John Edom <jedom123@gmail.com> wrote:
>
>> what i understand, if requirement is like that if auth-fail vlan is not
>> configured and we want auth-fail device also go to guest vlan then we use
>> this global command. In that case these both commands will be configured
>> (interface level and globaly)
>>
>> Please correct me if i am wrong.
>>
>> Regards
>>
>>
>> On Wed, Dec 24, 2008 at 5:29 PM, GAURAV MADAN <gauravmadan1177@gmail.com>wrote:
>>
>>> when in interface level ; you say :
>>>
>>> dot1x guest-vlan <>
>>>
>>> if the end device is non dot1x capable ; then it will be put in guest
>>> vlan .
>>> if device is dot1x capable and fails authentication ; it will not be
>>> allowed to access the network .
>>>
>>> Global command :
>>>
>>> dot1x guest-vlan supplicant
>>>
>>> it helps switch not to retain the history . i.e. if dot1x capable device
>>> fails the auth ; it will be put in guest vlan.
>>>
>>> HTH
>>> Gaurav Madan
>>>
>>> On Wed, Dec 24, 2008 at 2:15 PM, John Edom <jedom123@gmail.com> wrote:
>>>
>>>> Hi,
>>>>
>>>> is there any difference between config level "dot1x guest-vlan
>>>> supplicant"
>>>> and interface level command other then normal logic that is in config
>>>> mode
>>>> it will configured global? I tried to understand from doc but difficult.
>>>>
>>>> Regards
>>>>
>>>>
>>>> Blogs and organic groups at http://www.ccie.net
>>>>
>>>> _______________________________________________________________________
>>>> Subscription information may be found at:
>>>> http://www.groupstudy.com/list/CCIELab.html
Blogs and organic groups at http://www.ccie.net
This archive was generated by hypermail 2.1.4 : Thu Jan 01 2009 - 12:53:09 ARST