802.1x Wired Authentication

[mediaos718]

I would like to configure a Cisco [Cat 2960] switch for 802.1x wired authentication. I am able to assign a specific VLAN if the laptop passes or fails authentication with the use of Cisco ACS. If passed the port is assign to an internal VLAN - If failed the port is assign to Guest VLAN

However, I would like to assign 3rd VLAN (Based on time of the day) to be able to push updates.

Does anyone have any experience with this setup or closely similar?

[m.kafka]

Depends on your RADIUS Server, you would need to return a different VLAN based on time-of-day.

[mediaos718]

I am not able to do it through the Radius server. Is there a way to assign that 3rd VLAN at the switch level based on certain criteria. For example: If the laptop is locked or there is no activity or after a certain period of time, then assign the port to this VLAN. I need this VLAN so that I can push update to the PC