HP ProCurve Switch 2900yl-24G Access Security Manual page 246

Configuring Port-Based and Client-Based Access Control (802.1X)
General 802.1X Authenticator Operation
New Client
Authenticated
RADIUS-
Assigned
Yes
VLAN?
No
Authorized
VLAN
Yes
Configured?
No
Untagged
VLAN
Configured
Yes
On Port?
No
Figure 9-1. Priority of VLAN Assignment for an Authenticated Client
9-12
Assign New Client
to RADIUS-
Specified VLAN
Assign New Client
to Authorized VLAN
Configured on Port
Assign New Client
to Untagged VLAN
Configured On Port
Another
(Old) Client
Already Using
No
Port
?
Yes
New
Client VLAN
Same As Old
Yes
Client VLAN?
No
Are All Old
Clients On
Yes
Unauthorized
VLAN?
No
Reject New Client
On Port
Accept New Client
On Port
Drop All Clients
Using Unauthorized
VLAN