Operation Manual – 802.1x-HABP-MAC AuthenticationH3C S3610&S5510 Series Ethernet Switches Chapter 1 802.1x Configuration1-12Note:After an 802.1x supplicant passes authentication, the authentication server sendsauthorization information to the authenticator. If the authorization information containsVLAN authorization information, the authenticator adds the port connecting thesupplicant to the assigned VLAN. This neither changes nor affects the configurations ofthe port. The only result is that the assigned VLAN takes precedence over the manuallyconfigured one, that is, the assigned VLAN takes effect. After the supplicant goesoffline, the configured one takes effect.1.1.8 Features Working Together with 802.1xI. VLAN assigningAfter an 802.1x user passes the authentication, the server will send an authorizationmessage to the device. If the server is enabled with the VLAN assigning function, theassigned VLAN information will be included in the message. The device, depending onthe link type of the port used to log in, adds the port to the assigned VLAN according tothe following rules:z If the port link type is Access, the port leaves its current VLAN and joins theassigned VLAN.z If the port link type is Trunk, the assigned VLAN is allowed to pass the currenttrunk port. The default VLAN ID of the port is that of the assigned VLAN.z If the port link type is Hybrid, the assigned VLAN is allowed to pass the current portwithout carrying the tag. The default VLAN ID of the port is that of the assignedVLAN.The assigned VLAN neither changes nor affects the configuration of a port. However,as the assigned VLAN has higher priority than the user-configured VLAN, it is theassigned VLAN that takes effect after a user passes authentication. After the user goesoffline, the port returns to its original VLAN.For details about VLAN configuration, refer to VLAN Configuration.Note:z With a Hybrid port, the VLAN assigning will fail if you have configured the assignedVLAN to carry tags.z With a Hybrid port, you cannot configure an assigned VLAN to carry tags after theVLAN has been assigned.
