5-26
Configuring Port-Based Access Control (802.1x)
How 802.1x Authentication Affects VLAN Operation
Figure 5-6. The Active Configuration for VLAN 22 Temporarily Changes for the 802.1x Session
With the preceeding in mind, since (static) VLAN 33 is configured as
untagged on port A2 (see figure 5-5), and since a port can be untagged
on only one VLAN, port A2 loses access to VLAN 33 for the duration
of the 802.1x session involving VLAN 22. You can verify the temporary
loss of access to VLAN 33 with the show vlan 33 command.
Figure 5-7. The Active Configuration for VLAN 33 Temporarily Drops Port 22 for the 802.1x Session
This entry shows that port A2 is
temporarily untagged on VLAN 22 for
an 802.1x session. This is to
accomodate an 802.1x client’s access ,
authenticated by a RADIUS server,
where the server included an
instruction to put the client’s access on
VLAN 22.
Note: With the current VLAN
configuration (figure 5-5), the only time
port A2 appears in this show vlan 22
listing is during an 802.1x session with
an attached client . Otherwise, port A2
is not listed.
Even though port A2 is
configured as Untagged
on (static) VLAN 33 (see
figure 5-5), it does not
appear in the VLAN 33
listing while the 802.1x
session is using VLAN 22
in the Untagged status.
However, after the 802.1x
session with VLAN 22
ends, the active
configuration returns port
A2 to VLAN 33.
!FishSecurity.book Page 26 Thursday, October 10, 2002 9:19 PM
To Next Page
Loading...
Need help?
General
