Enabling 802.1X guest VLAN assignment delay
![[IMPORTANT: ]](images/important.png) | IMPORTANT: This feature is available in Release 1121 and later. | |
This feature delays assigning an 802.1X-enabled port to the 802.1X guest VLAN when 802.1 X authentication is triggered by packets from unknown MAC addresses on the port.
This feature does not take effect if the 802.1 X authentication is triggered by EAPOL-Start packets from 802.1X clients.
To use this feature, the 802.1X-enabled port must be configured with the unicast trigger feature and perform MAC-based access control.
When 802.1X authentication is triggered on a port, the device performs the following operations:
Sends a unicast EAP-Request/Identity packet to the MAC address that triggers the authentication.
Retransmits the packet if no response is received within the username request timeout interval set by using the dot1x timer tx-period command.
Assigns the port to the 802.1X guest VLAN after the maximum number of request attempts set by using the dot1x retry command is reached.
To enable 802.1X guest VLAN assignment delay on a port:
Step | Command | Remarks |
|---|---|---|
1. Enter system view. | system-view | N/A |
2. Enter Layer 2 Ethernet interface view. | interface interface-type interface-number | N/A |
3. Enable 802.1X guest VLAN assignment delay on the port. | dot1x guest-vlan-delay | By default, 802.1X guest VLAN assignment delay is disabled on a port. |