Comware Based
1748250 Members
3281 Online
108760 Solutions
New Discussion

Re: 802.1x radius server unavailable default vlan assignment

 
DavidGalveias
Frequent Visitor

802.1x radius server unavailable default vlan assignment

Hi all,

I'm trying to find out in the A-Series documentation (either at H3C or HP)a way to configure a switch do assign a vlan to a user in case a radius server is unavailable. I could only find references to guest vlan and auth-fail vlan, which offer different functionalities.
The feature I'm looking after is similar do Cisco's "dot1x critical".
Does anyone know if this functionality is available in A-Series switch?

Thanks in advance

1 REPLY 1
vangass
Frequent Advisor

Re: 802.1x radius server unavailable default vlan assignment

Hi,

 

Starting from 1702P30 firmware (check on H3C S3600/HP A3600) there is command:

 

mac-authentication critical vlan vlan-id
Use the mac-authentication critical vlan command to configure a MAC authentication
critical VLAN for a port, so that the port is assigned to the critical VLAN when all
authentication servers in the ISP domain of a user are not reachable.

Hope that it helps.

V.