![](/images/backgrounds/285815/hp-4100gl-users-manual-549937156x1.png)
Configuring
802.1x Open VLAN Mode
Table802.1x | Port Response |
No Open VLAN mode: | The port automatically blocks a client that cannot initiate an |
| authentication session. |
Open VLAN mode with both of the following configured:
• When the port detects a client, it automatically becomes an | |
| untagged member of this VLAN. If you previously configured the |
| port as a static, tagged member of the VLAN, membership |
| temporarily changes to untagged while the client remains |
| unauthenticated. |
| • If the port already has a statically configured, untagged |
| membership in another VLAN, then the port temporarily closes |
| access to this other VLAN while in the |
| • To limit security risks, the network services and access available |
| on the |
| needs to enable an authentication session. If the port is statically |
| configured as a tagged member of any other VLANs, access to |
| these VLANs remains open, even though the client may not be |
| |
• After the client is authenticated, the port drops membership in the | |
| |
| this VLAN. |
| Note: if RADIUS authentication assigns a VLAN, the port |
| temporarily becomes a member of the |
| instead of the |
| connected. |
| • If the port is statically configured as a tagged member of a VLAN, |
| and this VLAN is used as the |
| temporarily becomes an untagged member of this VLAN when the |
| client becomes authenticated. When the client disconnects, the |
| port returns to tagged membership in this VLAN. |
| • If the port is statically configured as a tagged member of a VLAN |
| that is not used by 802.1x Open VLAN mode, an unauthenticated |
| client capable of operating in tagged VLANs has access to this |
|