topic Re: Dynamic VLAN 802.1X Switchport Behavior with Unmanaged Switch Downlinked in ICX Switches

Dynamic VLAN 802.1X Switchport Behavior with Unmanaged Switch Downlinked

eric_markow_641 — Tue, 04 Dec 2018 05:15:11 GMT

Does anyone know what happens to the VLAN assignment of a DVLAN 802.1X wired port when connected it's downlinked to an unmanaged switch with multiple devices connected? Does the VLAN assignment of first device to perform the 802.1X authentication get assigned to all other devices on that port? Does the VLAN keep changing as different devices come online and authenticate? I can't imagine that the switch can perform multiple 802.1X auths on a single port, right?

Re: Dynamic VLAN 802.1X Switchport Behavior with Unmanaged Switch Downlinked

simon_pollard — Tue, 04 Dec 2018 08:38:05 GMT

Hi Eric

An ICX switch can authenticate up to 32 devices on a single port and assign each one to a different VLAN. Full details are here
http://docs.ruckuswireless.com/fastiron/08.0.80/fastiron-08080-securityguide/GUID-EA4E5652-0CEE-420E...

Re: Dynamic VLAN 802.1X Switchport Behavior with Unmanaged Switch Downlinked

eric_markow_641 — Tue, 04 Dec 2018 16:17:19 GMT

Hi Simon, thanks for the answer! I am wondering if the capability is the same when the switch port is used as the supplicant, and performing authentication based on the MAC address of the device connecting. This is how we have our networks configured, as some wired clients do not have an 802.1X support (smart TV's, printers, etc).

Re: Dynamic VLAN 802.1X Switchport Behavior with Unmanaged Switch Downlinked

simon_pollard — Tue, 04 Dec 2018 17:39:09 GMT

Multiple host authentication works for .1x and MAC authenticated clients. If multiple hosts are connected to a .1x or or MAC authentication-enabled port, then each is authenticated individually.

You can download the security config guide from the link that I included in my previous response.