On Wed, Mar 3, 2010 at 10:44 AM, Phil Mayers <p.may...@imperial.ac.uk> wrote: >> but how to set the fail VLAN and guest VLAN to Y ??? > > Setting the "Fail" and "Guest" VLAN by radius doesn't make any sense. > > The "Fail" vlan is what to use when the radius server is unavailable. > > The "Guest" vlan is what to do when the client doesn't do 802.1x i.e. no > radius. > > So you can't set these over radius.
Look in the Cisco documentation for information on: dot1x auth-fail vlan vlan-id and dot1x guest-vlan vlan-id -M - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
