3Com WX3000 Guest-vlan vlan-id, Mac-authentication timer, Guest-vlan-reauth interval

z

z

Guest VLANs are implemented in the mode of adding a port to a VLAN. For example, when multiple users are connected to a port, if the first user fails in the authentication, the other users can access only the contents of the Guest VLAN. The device will re-authenticate only the first user accessing this port, and the other users cannot be authenticated again. Thus, if more than one client is connected to a port, you cannot configure a Guest VLAN for this port.

After users that are connected to an existing port failed to pass authentication, the device adds the port to the Guest VLAN. Therefore, the Guest VLAN can separate unauthenticated users on an access port. When it comes to a trunk port or a hybrid port, if a packet itself has a VLAN tag and be in the VLAN that the port allows to pass, the packet will be forwarded perfectly without the influence of the Guest VLAN. That is, packets can be forwarded to the VLANs other than the Guest VLAN through the trunk port and the hybrid port, even users fail to pass authentication.

Follow these steps to configure a Guest VLAN:

To do…		Use the command…	Remarks
Enter system view		system-view	—
Enter Ethernet port view		interface interface-type	—
		interface-number
			Required
Configure the Guest VLAN for	mac-authentication		By default, no Guest VLAN is
the current port	guest-vlan vlan-id		configured for a port by
			default.
Return to system view	quit		—
			Optional
Configure the interval at which	mac-authentication timer		By default, the device
the device re-authenticates			re-authenticates the users in
	guest-vlan-reauth interval
users in Guest VLANs			Guest VLANs at the interval of
			30 seconds by default.

1-5