Re: Guest Vlan Vs AUth-fail Vlan

Still some confusion . can u please clear one more point .

If my clients are non dot1x capable .. ( say VOIP ph etc ) . Hence I
intend to use MAB as authentication method ..

What will be used ? Auth-fail vlan ?

Thnx
Gaurav Madan

On Mon, Nov 1, 2010 at 7:50 PM, Brian Landers <brian_at_bluecoat93.org> wrote:
> On Mon, Nov 1, 2010 at 9:49 AM, GAURAV MADAN <gauravmadan1177_at_gmail.com>
> wrote:
>>
>> I need more clarity on auth-fail vlan Vs Guest vlan .
>> I think one is when dot1x fails and other when MAB (MAC authentication
>> bypass) fails.
>>
>
> At a very high level:
> guest vlan = "client doesn't have a supplicant"
> auth-fail vlan = "client has a supplicant, but doesn't have valid
> credentials".
> If you're using MAB, and have a guest VLAN configured, a failed MAB
> authorization will put the port into the guest VLAN as well.
> B*
>
> --
> Brian C Landers
> http://www.packetslave.com/
> CCIE #23115 (R&S + Security)

Blogs and organic groups at http://www.ccie.net
Received on Mon Nov 01 2010 - 19:52:34 ART