Re: Guest Vlan Vs AUth-fail Vlan

On Mon, Nov 1, 2010 at 9:49 AM, GAURAV MADAN <gauravmadan1177_at_gmail.com>wrote:

> I need more clarity on auth-fail vlan Vs Guest vlan .
> I think one is when dot1x fails and other when MAB (MAC authentication
> bypass) fails.
>
>
At a very high level:

guest vlan = "client doesn't have a supplicant"

auth-fail vlan = "client has a supplicant, but doesn't have valid
credentials".

If you're using MAB, and have a guest VLAN configured, a failed MAB
authorization will put the port into the guest VLAN as well.

B*

--
Brian C Landers
http://www.packetslave.com/
CCIE #23115 (R&S + Security)
Blogs and organic groups at http://www.ccie.net