Hi Team,

 

I've run in to an issue where clients are getting a Guest VLAN assigned. This should not happen because my radius server is assigning a correct vlan for each client connecting. Under what circumstances does a client get assigned to a guest VLAN? And what port configuration is triggering guest vlan 40 in my case? 

 

SWITCH#show authentication clients all

Interface MAC-Address Method Host Mode Control Mode VLAN Assigned Reason
--------- ----------------- ------- ------------------------ ------------ --------------------------
~~SNIP~~
Gi3/0/32 ~MAC-Address #1~ 802.1X multi-domain auto RADIUS Assigned VLAN (40)
Gi3/0/34 ~MAC-Address #2~ mab multi-domain auto RADIUS Assigned VLAN (4)
Gi3/0/37 ~MAC-Address #3~ 802.1X multi-auth auto RADIUS Assigned VLAN (40)
Gi3/0/37 ~MAC-Address #4~ mab multi-auth auto RADIUS Assigned VLAN (4)
Gi3/0/37 ~MAC-Address #5~ none multi-auth auto Guest VLAN (40)
Gi3/0/37 ~MAC-Address #6~ none multi-auth auto Guest VLAN (40)
Gi3/0/37 ~MAC-Address #7~ none multi-auth auto Guest VLAN (40)
~~SNIP~~

 

SWITCH#show authentication statistics gigabitethernet 3/0/37

Port........................................... Gigabitethernet 3/0/37
802.1X attempts................................ 1134
802.1X failed attempts......................... 626
MAB attempts................................... 1191
MAB failed attempts............................ 385
Captive-portal attempts........................ 0
Captive-portal failed attempts................. 0

 

 

SWITCH#show running-config interface gigabitethernet 3/0/37

description "NAC ENABLED"
spanning-tree portfast
switchport mode general
authentication host-mode multi-auth
authentication event fail action authorize vlan 40
authentication event no-response action authorize vlan 40
authentication event server dead action authorize vlan 40
authentication event server alive action reinitialize
authentication periodic
dot1x timeout tx-period 1
dot1x max-reauth-req 3
dot1x max-req 3
mab
authentication order dot1x mab
authentication priority dot1x mab