3com S7906E Guide De Référence

 

1-7 

guest-vlan-id: ID of the VLAN to be specified as the guest VLAN, in the range 1 to 4094. It must already 

exist. 

interface interface-list: Specifies a port list. The interface-list argument is in the format of interface-list = 

{ interface-type interface-number [ to interface-type interface-number ] } & <1-10>, where interface-type 

represents the port type, interface-number represents the port number, and & <1-10> means that you 

can provide up to 10 port indexes/port index lists for this argument. The start port number must be 

smaller than the end number and the two ports must be of the same type. 

Use the dot1x guest-vlan command to configure the guest VLAN for specified or all ports. 

Use the undo dot1x guest-vlan command to remove the guest VLAN(s) configured for specified or all 

ports. 

By default, a port is configured with no guest VLAN. 

Note that: 

z 

In system view, this command configures a guest VLAN for all Layer 2 Ethernet ports if you do not 

specify the interface-list argument, and configures a guest VLAN for specified ports if you specify 

the interface-list argument. 

z 

In interface view, you cannot specify the interface-list argument and can only configure guest VLAN 

for the current port. 

z 

You must enable 802.1X for a guest VLAN to take effect. 

z 

You must enable the 802.1X multicast trigger function for a guest VLAN to take effect. 

z 

When the port access control method is set to portbased, you can specify a tagged VLAN as the 

guest VLAN of a Hybrid port, but the guest VLAN does not take effect. If the guest VLAN of a Hybrid 

port is in operation, you cannot configure the guest VLAN to carry VLAN tag. 

z 

A super VLAN cannot be set as the guest VLAN. Similarly, a guest VLAN cannot be set as the 

super VLAN. For information about super VLAN, refer to VLAN Configuration in the Access 

Volume. 

z 

You are not allowed to delete a VLAN that is configured as a guest VLAN. To delete such a VLAN, 

you need to remove the guest VLAN configuration first. 

z 

You cannot configure both the guest VLAN function and the free IP function on a port. 

Related commands: dot1x;  dot1x  port-method;  dot1x multicast-trigger;  mac-vlan enable, and 

display mac-vlan in VLAN Commands in the Access Volume. 

# Specify port GigabitEthernet 2/0/1 to use VLAN 999 as its guest VLAN. 

<Sysname> system-view 

[Sysname] dot1x guest-vlan 999 interface GigabitEthernet 2/0/1 

# Specify ports GigabitEthernet 2/0/2 to GigabitEthernet 2/0/5 to use VLAN 10 as its guest VLAN. 

<Sysname> system-view 

[Sysname] dot1x guest-vlan 10 interface GigabitEthernet 2/0/2 to GigabitEthernet 2/0/5 

# Specify all ports to use VLAN 7 as their guest VLAN. 

<Sysname> system-view 

[Sysname] dot1x guest-vlan 7