13-34
Configuring Port-Based and User-Based Access Control (802.1X)
802.1X Open VLAN Mode
■ Unauthorized-Client VLAN: Configure this VLAN when unauthenti-
cated, friendly clients will need access to some services before being
authenticated or instead of being authenticated.
■ Authorized-Client VLAN: Configure this VLAN for authenticated clients
when the port is not statically configured as an untagged member of a
VLAN you want clients to use, or when the port is statically configured as
an untagged member of a VLAN you do not want clients to use. (A port
can be configured as untagged on only one port-based VLAN. When an
Authorized-Client VLAN is configured, it will always be untagged and will
block the port from using a statically configured, untagged membership
in another VLAN.) Note that after client authentication, the port returns
to membership in any tagged VLANs for which it is configured. See the
"Note", above.