Hi, friend.
1. Guest VLAN
Description: When 802.1x is enabled on a port but authentication is not started, all services on the port use the guest VLAN.
Function: This function is used when some terminals do not have 802.1x terminal software and need to download 802.1x dial-up software or access restricted web pages through the guest VLAN.
Configuration: The guest VLAN is configured on the web management page. Configure the 802.1x service profile on the OLT.
2. Restrict VLAN
Description: When 802.1x is enabled on a port and 802.1x authentication is started on the port, but the authentication is rejected by the server, all services on the port are transmitted through the restrict VLAN.
Function: If the user fails to be authenticated, the user can only access specified resources. The user may use up the account balance and renew the account through the restrict VLAN or access the specified web page.
Configuration: The restrict VLAN is configured on the web management page. Configure the 802.1x service profile on the OLT.
3. Service VLAN
Cause: The 802.1x function is enabled on the port and 802.1x authentication is started on the port. After the authentication is successful, all services on the port are transmitted through the service VLAN.
Function: Users can access normal service resources. Indicates the VLAN tag that is added to a data packet when it passes through.
Configuration: The OLT configures service VLANs for each LAN port through OMCI. Multiple service VLANs can be configured.
4. Dynamic Service VLAN
Description: When the 802.1x function is enabled on the port and 802.1x authentication is started on the port, and the authentication succeeds, the RADIUS protocol allocates a dynamic service VLAN to the user through the specified attribute field. All services on the port are transmitted through the dynamic service VLAN allocated by the RADIUS server (replaces the service VLAN configured for the LAN port on the OLT through OMCI).
Function: Users can access normal service resources. Indicates the VLAN tag that is added to a data packet when it passes through.
Configuration: The RADIUS protocol allocates dynamic service VLANs to users based on specified attribute fields.
5. Critical VLAN
Cause: When 802.1x is enabled on a port, but the RADIUS server cannot be connected (route unreachable or connection times out) during authentication, all services on the port use the critical VLAN.
Function: Users can access the resources of a specific VLAN. Users may access the intranet through the critical VLAN but cannot access the extranet.
Configuration: The critical VLAN is configured on the web management page. Configure the 802.1x service profile on the OLT.
Thank you.
