HP 3500yl Series Access Security Manual page 622

Configuring Port-Based and User-Based Access Control (802.1X)
General 802.1X Authenticator Operation
New Client
Authenticated
RADIUS-
Assigned
Yes
VLAN?
No
Authorized
VLAN
Yes
Configured?
No
Untagged
VLAN
Configured
Yes
On Port ?
No
Figure 13-1. Priority of VLAN Assignment for an Authenticated Client
13-10
Assign New Client
to RADIUS-
Specified VLAN
Assign New Client
to Authorized VLAN
Configured on Port
Assign New Client
to Untagged VLAN
Configured On Port
Another
(Old) Client
Already Using
No
Port
?
Yes
New
Client VLAN
Same As Old
Yes
Client VLAN?
No
Are All Old
Clients On
Yes
Unauthorized
VLAN?
No
Reject New Client
On Port
Accept New Client
On Port
Drop All Clients
Using Unauthorized
VLAN