vlan and freeradius

[Matt Hite]

On Wed, Mar 3, 2010 at 10:44 AM, Phil Mayers <p.mayers at imperial.ac.uk> wrote:
>> but how to set the fail VLAN and guest VLAN to Y ???
>
> Setting the "Fail" and "Guest" VLAN by radius doesn't make any sense.
>
> The "Fail" vlan is what to use when the radius server is unavailable.
>
> The "Guest" vlan is what to do when the client doesn't do 802.1x i.e. no
> radius.
>
> So you can't set these over radius.

Look in the Cisco documentation for information on:

dot1x auth-fail vlan vlan-id

and

dot1x guest-vlan vlan-id

-M