Cat 9K dot1x multiple vlan per access-mode port

[Andrii Oliinyk]

Hi All

does anybody know if Cat9Ks with Fuji 16.9.2 support multple VLAN authorization on access port? docs i've read so far stated only limited platforms support it (like BRKSEC-2691 states f.e.):

Per MAC VLAN Assignment
58
•Before Cat3850 / Cat3650: One port, one VLAN per access port (1:1)
•Exception: Voice (one Data Device untagged, one Voice Device tagged w/ VVLAN)
•Later: Allowing VLAN assignment on multi-authentication ports, but first device ‘rules’ the port.
•Now with Catalyst 2960X, 3850 & 3650: Each session can have individual VLAN assigned
•2960X 15.2(2)E
•C3850 03.03.00SE
•C3650 03.03.00SE

[Georg Pauwen]

Hello,

Fuji on the C9K supports 802.1x Authentication with VLAN Assignment, is that what you are after ?

https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst9300/software/release/16-9/configuration_guide/sec/b_169_sec_9300_cg/configuring_ieee_802_1x_port_based_authentication.html#ID573

[Andrii Oliinyk]

Hi Georg

yes, it's about this specific condition :0) Thanks for the referrense 

• Multi-auth Per User VLAN assignment

[Andrii Oliinyk · Accepted solution]

confirmed ability to to have different VLANs per endpoint/per AuthZ-p on access multi-authen mode port. but traffic traverses only VLAN indicated as operational access vlan in "sho int X switch"