68
Enhancements in Release F.05.05 through F.05.70
Enhancements in Release F.05.05 through F.05.60
■ VLAN 33 becomes unavailable to port 2 for the duration of the session (because there can
be only one untagged VLAN on any port).
You can use the show vlan < vlan-id > command to view this temporary change to the active
configuration, as shown below:
■ You can see the temporary VLAN assignment by using the show vlan < vlan-id > command with
the < vlan-id > of the static VLAN that the authenticated client is using.
Figure 17. The Active Configuration for VLAN 22 Temporarily Changes for the 802.1X Session
■ With the preceding in mind, since (static) VLAN 33 is configured as untagged on port 2 (see
figure 16), and since a port can be untagged on only one VLAN, port 2 loses access to VLAN
33 for the duration of the 802.1X session involving VLAN 22. You can verify the temporary
loss of access to VLAN 33 with the show vlan 33 command.
This entry shows that port 2 is temporarily untagged on
VLAN 22 for an 802.1X session. This is to accommodate an
802.1X client’s access, authenticated by a RADIUS server,
where the server included an instruction to put the client’s
access on VLAN 22.
Note: With the current VLAN configuration (figure 16), the
only time port 2 appears in this show vlan 22 listing is during
an 802.1X session with an attached client. Otherwise, port
2 is not listed.