802.1x radius server unavailable default vlan assignment

[DavidGalveias]

Hi all,

I'm trying to find out in the A-Series documentation (either at H3C or HP)a way to configure a switch do assign a vlan to a user in case a radius server is unavailable. I could only find references to guest vlan and auth-fail vlan, which offer different functionalities.
The feature I'm looking after is similar do Cisco's "dot1x critical".
Does anyone know if this functionality is available in A-Series switch?

Thanks in advance

[vangass]

Hi,

Starting from 1702P30 firmware (check on H3C S3600/HP A3600) there is command:

mac-authentication critical vlan vlan-id

Use the mac-authentication critical vlan command to configure a MAC authentication
critical VLAN for a port, so that the port is assigned to the critical VLAN when all
authentication servers in the ISP domain of a user are not reachable.

Hope that it helps.

V.