488 Configuring Port and System Security
Invalid VLAN 
Assignment
Port State: Deny Port State: Permit
VLAN: Default PVID 
of the port
Invalid Filter-id Port State: Deny Port State: Permit
VLAN: Default PVID 
of the port
Bad RADIUS packet Port State: Deny Port State: Permit
VLAN: Default PVID 
of the port
RADIUS/IAS 
Failure
Default behavior Port State: Deny Port State: Permit
VLAN: Default PVID 
of the port
Unauth VLAN 
enabled
Port State: Permit
VLAN: Unauth
Port State: Permit
VLAN: Unauth
RADIUS 
Timeout
Default behavior Port State: Deny Port State: Permit
VLAN: Default PVID 
of the port
Unauth VLAN 
enabled
Port State: Deny Port State: Permit
VLAN: Unauth
EAPOL Timeout Default behavior Port State: Deny Port State: Permit
3 × EAPOL 
Timeout
(Guest VLAN 
timer expiry or 
MAB timer 
expiry)
Guest VLAN 
enabled
Port State: Permit 
VLAN: Guest
Port State: Permit
VLAN: Guest
MAB Success Case Port State: Permit
VLAN: Assigned
Filter: Assigned
Port State: Permit
VLAN: Assigned
Filter: Assigned
MAB Fail Case
 
Port State: Deny Port State: Permit
VLAN: Default PVID 
of the port
Table 19-1. IEEE 802.1X Monitor Mode Behavior (Continued)
Case Sub-case Regular Dot1x Dot1x Monitor Mode