Configuration procedure

To configure an 802.1X critical VLAN:

Step

Command

Remarks

1. Enter system view.

system-view

N/A

2. Enter Layer 2 Ethernet interface view.

interface interface-type interface-number

N/A

3. Configure an 802.1X critical VLAN on the port.

dot1x critical vlan vlan-id

By default, no critical VLAN is configured.

4. Configure the port to trigger 802.1X authentication on detection of a reachable authentication server for users in the critical VLAN.

dot1x critical recovery-action reinitialize

Optional.

By default, when a reachable RADIUS server is detected, the system removes the port or 802.1X users from the critical VLAN without triggering authentication.