Qtech QSW-8200-28T-AC [38/114] Dot1x macbased port down flush

User Manual

Chapter 2. Commands for 802.1x 38

www.qtech.ru

 Usage Guide: If there is no dedicated authentication client or the client version was too

low, and it makes no clients authenticate successfully on the port in some time, then

the access device will make this user join to the guest VLAN. User can get the 802.1x

client software in guest VLAN, update the client or do other updating things (such as

anti-virus software, system patches and etc.) When the user under the port in Guest

VLAN issues the authentication, this port will be stay in guest VLAN if the authentication

failed; if it was successful, there are two situations as below:

 The authentication server issues an auto VLAN, in this time, the user left the guest

VLAN and joined to the auto VLAN. After the user was downline, this user will be

assigned to the configured guest VLAN again.

 The authentication server did not issue the VLAN, in this time, the user left the guest

VLAN and joined to the configured native VLAN. After the user was downline, this user

will be assigned to the configured guest VLAN again.

 Notice:

 dot1x macbased guest-vlan can be configured only on the port based on mac

authentication and in HYBRID mode.

 Different macbased guestVLAN can be configured on different ports, but only one

macbased guestVLAN can be configured on one port.

 Example: Configure the guest-vlan of Ethernet1/0/3 as Vlan 10.

 Switch(Config-If-Ethernet1/0/3)#dot1x macbased guest-vlan 10

2.12 dot1x macbased port-down-flush

 Command: dot1x macbased port-down-flush

 no dot1x macbased port-down-flush

 Function: Enables this command, when the dot1x certification according to mac is

down, delete the user who passed the certification of the port; The no command does

not make the down operation.

 Command mode: Global Mode

 Default: The command is not enabled by default.

 Usage Guide: When users who passed the certification according to mac changed

among different ports, delete the user for the new certification. The command should

be enable to delete the user.

 Example: When the dot1x certification according to mac is down, delete the user who

passed the certification of the port.

 Switch(config)#dot1x macbased port-down-flush

2.13 dot1x max-req

 Command: dot1x max-req <count>

 no dot1x max-req