802.1x and VMware ACE

[harvidsson]

Hi,

we like to use 801.x for our VMvare host. We have a PC with a virtual instance installed. We like to put the PC in the guest vlan and the VM instance in the production vlan if it?s authenticated by the IAS server. The VM instance have the certificates.

When we test this today, with a Cisco 3750, the PC is placed in the Guest vlan which is correct. The problem is that when we start the virtual instance this is not authenticated. The VM is automatically placed in the Guest vlan even though it has the correct certs. The VM is never authenticated to the IAS server.

Does anybody have an idea how to implement this with Cisco switches?

Thanks in advance

//Henric

[bwilmoth]

When you connect the PC to the network, the 802.1x authentication occurs and the port is placed in the Guest-VLAN. As the VM is just an application running on the PC, 802.1x authentication will not occur after you start the VM instance. This is the expected behavior. 802.1x authentication occurs only when a client connects to the port of a switch.