radius-response

Use the text message provided in the RADIUS server response to the authentication request.

Configuring an access denied message on the switch
Output showing the custom access denied message
Access denied message when radius-response is configured

Unauthenticated clients can be assigned to a specific static, untagged VLAN (unauth-vid), to provide access to specific (guest) network resources. If no VLAN is assigned to unauthenticated clients, the port is blocked and no network access is available.