3com S7906E 설치 설명서

다운로드
페이지 2621
 
1-19 
To do… 
Use the command… 
Remarks 
Enter Ethernet interface view 
interface interface-type 
interface-number
 
— 
Enable periodic 
re-authentication 
dot1x re-authenticate 
Required 
Disabled by default 
 
 
After an 802.1X user passes authentication, if the authentication server assigns a re-authentication 
interval for the user through the session-timeout attribute, the assigned re-authentication interval will 
take effect instead of that specified on the device. The re-authentication interval assignment varies by 
server type. Refer to the specific authentication server implementation for further details. 
 
Configuring a Guest VLAN 
 
 
The guest VLAN function and the free IP function in EAD fast deployment are mutually exclusive on 
a port. 
If the traffic from a user-side device carries VLAN tags and the 802.1X authentication and guest 
VLAN functions are configured on the access port, you are recommended to configure different 
VLAN IDs for the voice VLAN, default VLAN of the port, and 802.1X guest VLAN. This is to ensure 
the normal use of the functions. 
A super VLAN cannot be set as the guest VLAN. Similarly, a guest VLAN cannot be set as the 
super VLAN. For information about super VLAN, refer to VLAN Configuration in the Access 
Volume
Only Hybrid ports support MGV. When you configure a MGV on a Hybrid port, you need configure 
the Hybrid port to permit packets of the MGV to pass through untagged. 
 
Configuration prerequisites 
Create the VLAN to be specified as the guest VLAN. 
To configure a port-based guest VLAN, make sure that the port access control method is 
portbased, and the 802.1X multicast trigger function is enabled. 
To configure a MAC-based guest VLAN, make sure that the port access control method is 
macbased and the MAC VLAN function is enabled on the port. For the MAC VLAN configuration, 
refer to VLAN Configuration in the Access Volume
Configuration procedure 
Follow these steps to configure a guest VLAN: