Hello, folks.
I`m successfully configured 3 Cisco SG300-28 to use Dynamic 802.1x VLANs and Guest VLAN at the same time, so if device doesn't respond to auth request, then Guest VLAN applied to the port. All works excellent, checked with Windows and Mac laptops.
But after that i started to configure another switches - SG300-52, and cannot get same result with same config. I see that device received auth-request, and after few seconds port switched as untagged in Guest VLAN, but no future traffic is exchanged after that (except periodic auth-requests), at least what i see in wireshark on laptop.
vlan database
vlan 10-19,1234
exit
dot1x system-auth-control
radius-server host 192.168.1.10 priority 20 usage dot1.x
radius-server host source-interface vlan 1
radius-server deadtime 10
aaa accounting dot1x start-stop group radius
!
interface vlan 18
name "VLAN 18"
dot1x guest-vlan
!
interface vlan 1234
name "Fake VLAN to be U on port"
!
interface gigabitethernet3
dot1x guest-vlan enable
dot1x reauthentication
dot1x radius-attributes vlan static
dot1x port-control auto
switchport mode access
switchport access vlan 1234
I tried to set VLAN 18 just untagged on port, without any other dot1x settings - everything is good, traffic is passed. When device support 802.1x and successfully passed authentication - everything is good too.
But this SG300-52 just not work as i expect! And with same config and firmware (really same, i checked twice!) SG300-28 worked great!
What i can do with this?
