dot1x vlan-tagged

Function

The dot1x vlan-tagged command enables the device to replace VLAN IDs carried in user packets with a specified VLAN ID.

The undo dot1x vlan-tagged command restores the default configuration.

By default, the device is disabled from replacing VLAN IDs carried in user packets with a specified VLAN ID.

Format

dot1x vlan-tagged { access-vlan access-vlan | guest-vlan guest-vlan | untagged } ^*

undo dot1x vlan-tagged { access-vlan access-vlan | guest-vlan guest-vlan | untagged } ^*

Parameters

Parameter	Description	Value
access-vlan access-vlan	Specifies a VLAN ID with which the device replaces VLAN IDs carried in the packets of users who pass the authentication.	The value is an integer ranging from 1 to 4094.
guest-vlan guest-vlan	Specifies a VLAN ID with which the device replaces VLAN IDs carried in the packets of users who fail the authentication.	The value is an integer ranging from 1 to 4094.
untagged	Dot1x vlan untagged.	-

Parameter

Description

Value

access-vlan access-vlan

Specifies a VLAN ID with which the device replaces VLAN IDs carried in the packets of users who pass the authentication.

The value is an integer ranging from 1 to 4094.

guest-vlan guest-vlan

Specifies a VLAN ID with which the device replaces VLAN IDs carried in the packets of users who fail the authentication.

The value is an integer ranging from 1 to 4094.

untagged

Dot1x vlan untagged.

Views

GE optical interface view, GE electrical interface view

Default Level

2: Configuration level

Task Name and Operations

Task Name	Operations
dot1x	write

Usage Guidelines

Usage Scenario

To separately manage the traffic of users who pass the authentication and who fail the authentication, run the dot1x vlan-tagged command to enable the device to replace VLAN IDs carried in user packets with a specified VLAN ID for traffic isolation.

Prerequisites

MAC bypass authentication has been enabled using the dot1x mac-bypass command.

Precautions

In VS mode, this command is supported only by the admin VS.

Example

# Enable MAC bypass authentication on the interface GE0/1/1 and enable the device to replace VLAN IDs carried in the packets of users who pass the authentication with a VLAN ID of 100.

<HUAWEI> system-view
[~HUAWEI] vlan 100
[~HUAWEI] interface GigabitEthernet 0/1/1
[*HUAWEI-GigabitEthernet0/1/1] portswitch
[*HUAWEI-GigabitEthernet0/1/1] commit
[*HUAWEI-GigabitEthernet0/1/1] port trunk allow-pass vlan 100
[~HUAWEI-GigabitEthernet0/1/1] dot1x enable
[*HUAWEI-GigabitEthernet0/1/1] dot1x mac-bypass delay 50
[*HUAWEI-GigabitEthernet0/1/1] dot1x vlan-tagged access-vlan 100