83
Enhancements
Release L.11.08 Enhancements
Figure 4. Active Configuration for VLAN 22 Temporarily Changes for the 802.1X Session
However, as shown in Figure 4, because VLAN 33 is configured as untagged on port 2 and because a
port can be untagged on only one VLAN, port 2 loses access to VLAN 33 for the duration of the 802.1X
session on VLAN 22.
You can verify the temporary loss of access to VLAN 33 by entering the
show vlan 33
command as
shown in Figure 5.
Figure 5. Active Configuration for VLAN 33 Temporarily Drops Port 2 for the 802.1X Session
In the
show
command output, port 2 is temporarily
configured as untagged on VLAN 22 for an 802.1X session.
This temporary configuration change is necessary to
accommodate an 802.1X client’s access, authenticated by a
RADIUS server, in which the server included an instruction
to assign the client session to VLAN 22.
Note:
In the current VLAN configuration, port 2 is only listed
as a member of VLAN 22 in
show vlan 22
output when an
802.1X session with an authenticated client is active.
Otherwise, port 2 is not listed.
Although port 2 is configured as
Untagged on VLAN 33 (in Fig. 5),
port 2 is not listed in
show vlan 33
output during the 802.1X session
that uses VLAN 22 in Untagged
mode. However, when the 802.1X
session on VLAN 22 ends, the
active configuration restores port
2 as an untagged member of
VLAN 33.
