Table 19-1. IEEE 802.1X Monitor Mode Behavior (Continued)
Case
RADIUS/Local
Failure
RADIUS
Timeout
EAPOL Timeout Default behavior
3 × EAPOL
Timeout
(Guest VLAN
timer expiry or
MAB timer
expiry)
Supplicant
Timeout
Port/Client
Authenticated
on Guest VLAN
488
Configuring 802.1X and Port-Based Security
Sub-case
Bad RADIUS packet Port State: Deny
Default behavior
Unauth VLAN
enabled
Default behavior
Unauth VLAN
enabled
Guest VLAN
enabled
MAB Success Case Port State: Permit
MAB Fail Case
Delete Guest
VLANID through
Dot1Q
Regular Dot1x
Port State: Deny
Port State: Permit
VLAN: Unauth
Port State: Deny
Port State: Deny
Port State: Deny
Port State: Permit
VLAN: Guest
VLAN: Assigned
Filter: Assigned
Port State: Deny
Port State: Deny
Port State: Deny
Dot1x Monitor Mode
Port State: Permit
VLAN: Default PVID
of the port
Port State: Permit
VLAN: Default PVID
of the port
Port State: Permit
VLAN: Unauth
Port State: Permit
VLAN: Default PVID
of the port
Port State: Permit
VLAN: Unauth
Port State: Permit
Port State: Permit
VLAN: Guest
Port State: Permit
VLAN: Assigned
Filter: Assigned
Port State: Permit
VLAN: Default PVID
of the port
Port State: Deny
Port State: Permit
VLAN: Default PVID
of the port