802.1x fall back

[mike-greene]

Hi,

Is there a was to setup 802.1x so if the ACS services go down it will put users trying to log in into a VLAN other than the guest VLAN? Currently if the ACS box is up they get put into our office VLAN. If the ACS server is down new users (valid users not guests) get placed into the guest VLAN.

Thanks for the help.

[Prashanth Krishnappa]

802.1x feature varies from platform to platform. Since you did not mention what kind of switch you have, I will take a jab. Look to see if the switch you have supports "Authentication Failed VLAN" feature. Here is some info from 4500 documentation

http://www.cisco.com/univercd/cc/td/doc/product/lan/cat4000/12_2_25s/conf/dot1x.htm#wp1187971

[axfood]

On the Cat2970/3560/3750 you have the "dot1x critical" interface command. It works fine for me.