Configuration guidelines – H3C Technologies H3C WX6000 Series Access Controllers User Manual

Page 396

Advertising
background image

35-15

Item

Description

Guest VLAN

Specify whether to enable the guest VLAN function on the specified port. If you enable
the function, you also need to specify the VLAN ID.

The specified VLAN ID must have existed. The VLAN ID can be configured on the
page you enter by selecting Network > VLAN.

To configure a PGV, make sure that the 802.1X multicast trigger function is
enabled on the port. To configure an MGV, make sure that the MAC VLAN function
is enabled on the port.

Return to

802.1X configuration procedure

.

Configuration Guidelines

When configuring 802.1X, note that:

1) 802.1X configuration on a specific port can take effect only after both global 802.1X and 802.1X on

the specific port are enabled.

2) Do not change the timer parameters of global 802.1X from their default values unless you have

determined that the changes would better the interaction process in some special network

environment.

3) A port enabled with 802.1X cannot be added to an aggregation group. Meanwhile, it is prohibited to

enable 802.1X on a port that belongs to an aggregation group.

4) For an 802.1X client using Extensible Authentication Protocol (EAP) authentication, the device

directly encapsulates contents from the client and sends them to the authentication server. In this

scenario, the configuration on username format on the device does not take effect. For details

about username format configuration, refer to

MAC Address Configuration

.

5) The Voice VLAN and 802.1X functions are mutually exclusive on an access port if the connected

client sends untagged traffic.

Advertising