Configuring an Auth-Fail VLAN
Perform this task to allow authentication failed Web authentication users to access resources in the Auth-Fail VLAN.
When you configure an Auth-Fail VLAN, follow these restrictions and guidelines:
To make the Auth-Fail VLAN take effect, you must also enable MAC-based VLAN on the interface, and set the subnet of the Auth-Fail VLAN as the Web authentication-free subnet.
Because MAC-based VLAN takes effect only on Hybrid ports, Auth-Fail VLAN also takes effect only on Hybrid ports.
If a VLAN is specified as the super VLAN, do not configure the VLAN as an Auth-Fail VLAN of an interface. If a VLAN is specified as an Auth-Fail VLAN of an interface, do not configure the VLAN as a super VLAN.
Do not delete the VLAN that has been configured as an Auth-Fail VLAN. To delete this VLAN, first cancel the Auth-Fail VLAN configuration by using undo web-auth auth-fail vlan command.
To configure an Auth-Fail VLAN:
Step | Command | Remarks |
|---|---|---|
1. Enter system view. | system-view | N/A |
2. Enter interface view. | interface interface-type interface-number | N/A |
3. Configure an Auth-Fail VLAN. | web-auth auth-fail vlan authfail-vlan-id | By default, no Auth-Fail VLAN exists. |