![](/images/backgrounds/285757/hp-procurve-2600-series-users-manual-550038208x1.png)
Configuring
802.1X Open VLAN Mode
Condition | Rule |
|
|
Effect of
•When a client becomes authenticated on a port that is already configured with a static, untagged VLAN, the switch temporarily moves the port to the
•When the authenticated client disconnects, the switch removes the port from the
Multiple Authenticator Ports Using | You can use the same static VLAN as the |
the Same | for all 802.1X authenticator ports configured on the switch. Similarly, |
you can use the same static VLAN as the | |
| all 802.1X authenticator ports configured on the switch. |
| Caution: Do not use the same static VLAN for both the unauthorized |
| and the |
| security risk by defeating the isolation of unauthenticated clients. |
Effect of Failed Client Authentication Attempt
When there is an
IP Addressing for a Client Connected | A client can either acquire an IP address from a DHCP server or have | |
to a Port Configured for 802.x Open | a preconfigured, manual IP address before connecting to the switch. | |
VLAN Mode |
|
|
802.1X Supplicant Software for a | A friendly client, without 802.1X supplicant software, connecting to an | |
Client Connected to a Port Configured | authenticator port must be able to download this software from the | |
for 802.1X Open VLAN Mode | ||
|
| |
|
|
|
Note: | If you use the same VLAN as the | |
| cator ports, unauthenticated clients on different ports can communicate with |
each other. However, in this case, you can improve security between authenticator ports by using the switch’s