SG350x 802.1x with WOL

[barr]

Hello

I have SG350x 48 and i want to set 802.1x mac authentification with radius and wol. But looks wol and 802.1x mac not working together. If i set 802.1x on port. Port is automaticly set untrustet. And wol packet cant go throw it. Is there any solution for it? 

On SG300 it works good, on catalist SW it work whit this command dot1x control-direction in, but i cannot get to work this on SG350. 

Thanks for advice

Tom

[bhuber]

Hello Tom,

I have the same problem. Did you solve this?

Best regards
Benjamin

[barr]

Hello, yes

you have to use quest vlan. 

enable quest vlan on vlan interface: Not possible via gui

interface vlan XXX
dot1x guest-vlan

After that : (possible via gui)

interface x/y/z
dot1x guest-vlan enable

Tom

[bhuber]

Hello Tom,

thanks a lot for your fast reply.

Can you explain, how the guest Vlan does help here? Frankly I don't get it

BR
Benjamin

[barr]

Yes i can,

sorry, my english is not the best  

If you are using 802.1x, that unautorized devices are cut of any lan/vlan. And do not pass wol packet through the port,  sg300 can do this. So if you will use quest vlan, unauthorized port is connected to this quest vlan and you can sent woll packet onto this port (device on this port).

[balaji.bandi]

If that is working on SG300, that should work on same SG350 too, since that is same Family, check what Firware on both the device.

Can you post the config on SG300 was working ? try multisession ?

below command syntax :

https://www.cisco.com/c/en/us/td/docs/switches/lan/csbms/CBS_250_350/CLI/cbs-350-cli-/802_1X_Commands.html#wp1215086380