516 Configuring 802.1X and Port-Based SecurityHow Does the Authentication Server Assign DiffServ Filters?The PowerConnect M6220, M6348, M8024, and M8024-k switches allow theexternal 802.1X Authenticator or RADIUS server to assign DiffServ policiesto users that authenticate to the switch. When a host (supplicant) attemptsto connect to the network through a port, the switch contacts the 802.1Xauthenticator or RADIUS server, which then provides information to theswitch about which DiffServ policy to assign the host (supplicant). Theapplication of the policy is applied to the host after the authenticationprocess has completed.Unauth VLANenabledPort State: PermitVLAN: UnauthPort State: PermitVLAN: UnauthRADIUSTimeoutDefault behavior Port State: Deny Port State: PermitVLAN: DefaultUnauth VLANenabledPort State: Deny Port State: PermitVLAN: UnauthEAPOL Timeout Default behavior Port State: Deny Port State: PermitVLAN: DefaultGuest VLANenabledPort State: PermitVLAN: GuestPort State: PermitVLAN: GuestMAB Success Case Port State: PermitVLAN: AssignedFilter: AssignedPort State: PermitVLAN: AssignedFilter: AssignedMAB Fail Case Port State: Deny Port State: PermitVLAN: DefaultSupplicantTimeoutPort State: Deny Port State: DenyTable 19-1. IEEE 802.1X Monitor Mode Behavior (Continued)Case Sub-case Regular Dot1x Dot1x Monitor Mode
