configure netlogin move-fail-action

configure netlogin move-fail-action [authenticate | deny]

Description

Configures the action network login takes if a VLAN move fails. This can occur if two clients attempt to move to an untagged VLAN on the same port.

Syntax Description

authenticate Specifies that the client is authenticated.
deny Specifies that the client is not authenticated. This is the default setting.

Default

The default setting is deny.

Usage Guidelines

Use this command to specify how network login behaves if a VLAN move fails. Network login can either authenticate the client on the current VLAN or deny the client.

The following describes the parameters of this command if two clients want to move to a different untagged VLAN on the same port:
  • authenticate—Network login authenticates the first client that requests a move and moves that client to the requested VLAN. Network login authenticates the second client but does not move that client to the requested VLAN. The second client moves to the first client‘s authenticated VLAN.

  • deny—Network login authenticates the first client that requests a move and moves that client. Network login does not authenticate the second client.

To view the current move-fail-action setting on the switch, use the show netlogin command.

Example

The following command configures network login to authenticate the client on the current VLAN:

configure netlogin move-fail-action authenticate

History

This command was first available in ExtremeXOS 11.1.

Platform Availability

This command is available on the ExtremeSwitching X435, X440-G2, X450-G2, X460-G2, X465, X590, X620, X670-G2, X690, X695, and X870 series switches.