Selective server-reject VLAN in 802.1X authentication

You can enhance authentication processes with the server-reject-vlan statement at the [edit protocols dot1x authenticator interface interface-name] hierarchy level. When the RADIUS server rejects the 802.1X authentication request from a client, this feature places the client into a restricted VLAN where it can be given limited network access.