I'd like to be able to define a "VLAN of last resort", which is where a user ends up under the following scenarios: The User fails to authenticate via either MAB or Dot1X Despite being able to authorize, the user chooses to VLAN deliberately. ISE ...