cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
Join Customer Connection to register!
851
Views
0
Helpful
2
Replies
walfors
Beginner

Private-VLAN and IEEE 802.1X/MAB

Hello,

A client of mine wants to use private-VLAN ("isolated ports") on interfaces configured as IEEE 802.1X with MAB  - but I am running into trouble with the switchport mode private-vlan host command: " Command rejected: Gi1/0/1 is Authentication. Authentication must be disabled before changing port mode enabled port."

Should it be possible to configure, or is there a limitation w/h the MAB feature?

IOS c3750-ipbasek9-mz.150-1.SE.bin

Thanks

Lennart

2 REPLIES 2
Reza Sharifi
Hall of Fame Expert

Hi,

try adding this command globally first:

dot1x system-auth-control

and than try 

switchport mode private-vlan host

HTH

Hi Reza,

The dot1x system-auth-control command is already there - I think it's needed for the IEEE802.1X feature.

I did remove the voice VLAN, but the problem remains.

Best ones,

Lennart