dot1x and Guest VLAN

Unanswered Question
Jan 8th, 2008
User Badges:

Hi everybody,


I have a 2960 switch that is configured for dot1x.

The users who are member of PEAP group can connect to network but other users (guest users) who are member of our domain but they are not member of PEAP group can not connect and the port is not connected.


Would you please advise me in this issue?


  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
shrikar.dange Tue, 01/08/2008 - 22:24
User Badges:
  • Bronze, 100 points or more


hi,


When you configure a guest VLAN, clients that are not IEEE 802.1x-capable are put into the guest VLAN when the server does not receive a response to its EAP request/identity frame. Clients that are IEEE 802.1x-capable but that fail authentication are not granted network access. The switch supports guest VLANs in single-host or multiple-hosts mode.


for ready refference

http://www.cisco.com/en/US/docs/switches/lan/catalyst2960/software/release/12.2_37_ey/configuration/guide/sw8021x.html


HTH,


regards,

shri :)



Actions

This Discussion