dot1x and Guest VLAN

[Siamak.Mianji]

Hi everybody,

I have a 2960 switch that is configured for dot1x.

The users who are member of PEAP group can connect to network but other users (guest users) who are member of our domain but they are not member of PEAP group can not connect and the port is not connected.

Would you please advise me in this issue?

[shrikar.dange]

hi,

When you configure a guest VLAN, clients that are not IEEE 802.1x-capable are put into the guest VLAN when the server does not receive a response to its EAP request/identity frame. Clients that are IEEE 802.1x-capable but that fail authentication are not granted network access. The switch supports guest VLANs in single-host or multiple-hosts mode.

for ready refference

http://www.cisco.com/en/US/docs/switches/lan/catalyst2960/software/release/12.2_37_ey/configuration/guide/sw8021x.html

HTH,

regards,

shri :)