Hi NE77,
are you assigning both neap-vlan (user/guest) via radius or is there an static port/vlan assigment with simple allowing those (known) MAC-Addresses?
Normally the accessport is set to "untagAll" and all radius assigned vlans will be provisioned untagged in parallel with no need of tagging/untagPVIDonly/PVID.
Which type of Radius do you use? Identity Engines from Avaya or any other?
Hi MatzeKS,
Yes, i did assigning both vlan via radius. I'm using ClearPass policy manager 6.6.2.86786 on CP-HW-500 platform.
Below is the switch VLAN setting.
vlan create 10,100 type port 1
vlan name 10 "User"
vlan name 100 "Guest"
vlan ports 1-46 tagging unTagPvidOnly
vlan ports 47-48 tagging tagAll
vlan configcontrol flexible
vlan members 1 NONE
vlan members 10,100 ALL
vlan ports 1-46 pvid 10
no auto-pvid
Thanks you.