Lenovo RackSwitch G8264 Application Manual

Also see for RackSwitch G8264: Installation guide Product guide Product guide Command reference Installation guide

Contents

© Copyright Lenovo 2016 Chapter 6: 802.1X Port-Based Network Access Control 121EAPoL Port StatesThe state of the port determines whether the client is granted access to the network,as follows: UnauthorizedWhile in this state the port discards all ingress and egress traffic except EAPpackets. AuthorizedWhen the client is successfully authenticated, the port transitions to theauthorized state allowing all traffic to and from the client to flow normally. Force UnauthorizedYou can configure this state that denies all access to the port. Force AuthorizedYou can configure this state that allows full access to the port.Use the 802.1X global configuration commands (dot1x) to configure 802.1Xauthentication for all ports in the switch. Use the 802.1X port commands toconfigure a single port.Guest VLANThe guest VLAN provides limited access to unauthenticated ports. The guestVLAN can be configured using the following commands:Client ports that have not received an EAPOL response are placed into the GuestVLAN, if one is configured on the switch. Once the port is authenticated, it ismoved from the Guest VLAN to its configured VLAN.When Guest VLAN enabled, the following considerations apply while a port is inthe unauthenticated state: The port is placed in the guest VLAN. The Port VLAN ID (PVID) is changed to the Guest VLAN ID. Port tagging is disabled on the port.RS G8264(config)# dot1x guest vlan ?