7.1.4 Configuring Dynamic VLAN

Sets the authentication mode to dynamic VLAN mode for a given interface.

Points to note

In dynamic VLAN mode, set the post-authentication VLAN. Configure MAC port, configure the Pre-Authentication VLAN (native VLAN), and enable IEEE802.1X authentication on the port. Next, configure the authentication submode. If you omit the authentication sub-mode setting, the port will operate in single-terminal mode. In dynamic VLAN mode, multi-mode cannot be set for the authentication submode.

Command examples

1. (config)# vlan 100 mac-based

   (config-vlan)# state active

   (config-vlan)# exit

   Set MAC VLAN on VLAN100 as the post-authentication VLAN.

2. (config)# interface gigabitethernet 1/0/1

   (config-if)# switchport mode mac-vlan

   (config-if)# switchport mac native vlan 10

   Sets mac-vlan for port 1/0/1 and sets the native VLAN.

3. (config-if)# dot1x multiple-authentication

   Specifies terminal authentication mode as the authentication sub-mode.

4. (config-if)# dot1x port-control auto

   Enable IEEE 802.1X authentication.