Private-VLAN and IEEE 802.1X/MAB

[walfors]

Hello,

A client of mine wants to use private-VLAN ("isolated ports") on interfaces configured as IEEE 802.1X with MAB  - but I am running into trouble with the switchport mode private-vlan host command: " Command rejected: Gi1/0/1 is Authentication. Authentication must be disabled before changing port mode enabled port."

Should it be possible to configure, or is there a limitation w/h the MAB feature?

IOS c3750-ipbasek9-mz.150-1.SE.bin

Thanks

Lennart

[Reza Sharifi]

Hi,

try adding this command globally first:

dot1x system-auth-control

and than try 

switchport mode private-vlan host

HTH

[walfors]

Hi Reza,

The dot1x system-auth-control command is already there - I think it's needed for the IEEE802.1X feature.

I did remove the voice VLAN, but the problem remains.

Best ones,

Lennart