[c-nsp] 802.1x - GUEST VLAN
Manu Chao
linux.yahoo at gmail.com
Tue Jan 10 13:51:28 EST 2006
We use 802.1x GUEST VLAN feature in order to provide a minimal web access to
user not registered in our Windows or Novell domain.
interface Fax/y/z
dot1x port-control auto
dot1x guest-vlan 666
A 3750 interface come on the Guest VLAN if no EAP request is performed
before 1min30s.
It work fine when 802.1x is not configured on the Guest user computers
...
but we have serious problem (by design) when an external guest user came in
our network with his NIC 802.1x enabled.
In this case, no way to provide them a minimal guest access.
We would like the port came in a Guest VLAN after one or several
802.1xREJECT attempt?
Is it possible?
Thanks you for your help.
Manu
More information about the cisco-nsp
mailing list