HP ProCurve J8766A Release Note page 88

Enhancements
Release L.11.08 Enhancements
Example of Untagged VLAN Assignment in a RADIUS-Based Authentication
Session
The following example shows how an untagged static VLAN is temporarily assigned to a port for use
during an 802.1X authentication session. In the example, an 802.1X-aware client on port 2 has been
authenticated by a RADIUS server for access to VLAN 22. However, port 2 is not configured as a
member of VLAN 22 but as a member of untagged VLAN 33 as shown in Figure 3.
Figure 3. Example of an Active VLAN Configuration in the Menu Interface View
In Figure 3, if RADIUS authorizes an 802.1X client on port 2 with the requirement that the client use
VLAN 22, then:
VLAN 22 becomes available as Untagged on port 2 for the duration of the session.
■
■ VLAN 33 becomes unavailable to port 2 for the duration of the session (because there can
be only one untagged VLAN on any port).
To view the temporary VLAN assignment as a change in the active configuration, use the show vlan
<vlan-id> command as shown in Figure 4 where <vlan-id> is the (static or dynamic) VLAN used in the
authenticated client session.
82
Scenario: An authorized
802.1X client requires access
to VLAN 22 from port 2.
However, access to VLAN 22
is blocked (not untagged or
tagged) on port 2 and VLAN 33
is untagged on port 2.