Cisco，逃生VLAN

Catalyst

接口下：

interface GigabitEthernet1/0/16

 description Link-to-Internet-PC

 switchport access vlan 83

 switchport mode access

 switchport voice vlan 104

 iparp inspection limit rate 100

 authentication event server dead actionauthorize vlan 83

 authentication event no-response actionauthorize vlan 4

 authentication event server alive actionreinitialize

 authentication periodic

 authentication timer reauthenticate 10800

 spanning-tree portfast

Switch(config-if)# authenticationeventno-response action authorize vlan 50 //客户机不支持802.1x(不响应认证请求)把端口划入vlan 50(即guest vlan),早版本的命令为dot1x guest-vlan 50

Switch(config-if)# authenticationeventserver dead action authorize vlan 17 //开启InaccessibleAuthentication Bypass特性，即如果没有可用的radius服务器则