Configuring an 802.1X Auth-Fail VSI
Restrictions and guidelines
You can configure only one 802.1X Auth-Fail VSI on a port. The 802.1X Auth-Fail VSIs on different ports can be different.
Prerequisites
Before you configure the 802.1X Auth-Fail VSI on an 802.1X-enabled port, complete the following tasks:
Enable L2VPN.
Create the VSI to be specified as the 802.1X Auth-Fail VSI, and create a VXLAN for the VSI.
Enable MAC-based traffic matching for dynamic Ethernet service instances on the port if the port performs MAC-based access control.
For more information, see VXLAN Configuration Guide.
Procedure
Enter system view.
system-view
Enter interface view.
interface interface-type interface-number
Configure the 802.1X Auth-Fail VSI on the port.
dot1x auth-fail vsi authfail-vsi-name
By default, no 802.1X Auth-Fail VSI exists on a port.