vlan and freeradius

Matt Hite lists at beatmixed.com
Thu Mar 4 03:21:16 CET 2010

On Wed, Mar 3, 2010 at 10:44 AM, Phil Mayers <p.mayers at imperial.ac.uk> wrote:
>> but how to set the fail VLAN and guest VLAN to Y ???
> Setting the "Fail" and "Guest" VLAN by radius doesn't make any sense.
> The "Fail" vlan is what to use when the radius server is unavailable.
> The "Guest" vlan is what to do when the client doesn't do 802.1x i.e. no
> radius.
> So you can't set these over radius.

Look in the Cisco documentation for information on:

dot1x auth-fail vlan vlan-id


dot1x guest-vlan vlan-id


More information about the Freeradius-Users mailing list