Dell PowerConnect 5548 User Guide - Page 131

• If a port is Guest-VLAN-enabled, the switch automatically adds the port as an untagged member of the Guest VLAN when the port is not authorized, and removes the port from the Guest VLAN when the first supplicant of the port is authorized. • The Guest VLAN cannot be used as both the Voice VLAN and an unauthenticated VLAN. The switch also uses the Guest VLAN for authentication at ports configured with Multiple Session mode and MAC-based authentication. Therefore, you must configure a Guest VLAN before you can use the MAC-based authentication mode. For authentication to function, it must be activated both globally, in the PortBased Authentication Global page and individually on each port, in the PortBased Authentication Interface Settings pages. Monitoring Mode Monitoring mode enables providing users who fail authentication with limited network access. This enables these users to correct the reason that the authentication failed. The following are the main aspects of this feature: • Enables successful authentications using the returned RADIUS information • Provides a mechanism to report unsuccessful authentications without negative repercussions to the user due to administrator errors • Accurately reports the data received from the successful and non- successful operations so that appropriate changes to problem areas may be made. The Dot1x monitoring activation command includes a special VLAN that is used when there is no access interface configuration present and the client(s) unsuccessfully authenticates. These clients are placed in the special VLAN. For users that unsuccessfully authenticate during re-authentication process, but already have existing VLANs configured, the failure to authenticate does not put them in a disabled state but places them back to the existing configuration. Dell PowerConnect 55xx Systems User Guide 131