3 Mar
2010
3 Mar
'10
9:21 p.m.
On Wed, Mar 3, 2010 at 10:44 AM, Phil Mayers <p.mayers@imperial.ac.uk> wrote:
but how to set the fail VLAN and guest VLAN to Y ???
Setting the "Fail" and "Guest" VLAN by radius doesn't make any sense.
The "Fail" vlan is what to use when the radius server is unavailable.
The "Guest" vlan is what to do when the client doesn't do 802.1x i.e. no radius.
So you can't set these over radius.
Look in the Cisco documentation for information on: dot1x auth-fail vlan vlan-id and dot1x guest-vlan vlan-id -M