Configuring the 802.1X critical VLAN on a port

• Assign different IDs to the PVID, the voice VLAN, and the 802.1X critical VLAN on a port. The assignment makes sure the port can correctly process VLAN-tagged incoming traffic.

• You can configure only one 802.1X critical VLAN on a port. The 802.1X critical VLANs on different ports can be different.

• You cannot specify a VLAN as both a super VLAN and an 802.1X critical VLAN. For information about super VLANs, see Layer 2—LAN Switching Configuration Guide.

Before you configure an 802.1X critical VLAN, complete the following tasks:

• Create the VLAN to be specified as a critical VLAN.

• If the 802.1X-enabled port performs MAC-based access control, perform the following operations for the port:

  • Configure the port as a hybrid port.

  • Enable MAC-based VLAN on the port. For more information about MAC-based VLANs, see Layer 2—LAN Switching Configuration Guide.

  • Assign the port to the 802.1X critical VLAN as an untagged member.

1. Enter system view.

   system-view

2. Enter interface view.

   interface interface-type interface-number

3. Configure the 802.1X critical VLAN on the port.

   dot1x critical vlan critical-vlan-id

   By default, no 802.1X critical VLAN exists on a port.