ERS4000 Cannot perform VLAN changes on EAP enabled port

[z1vikingfan]

We have 802.1x/EAP enabled on our ERS4000's and seems to be working well from the port security side of things.  Something that has been bothering us: in order to perform a manual administrative VLAN change, we have to disable EAPOL in order to change the VLAN assignment on ports.  The message we receive is "Cannot perform VLAN changes on EAP enabled port".

Does anyone know why this is?

[MatzeKS]

Hi z1vikingfan,

this works as designed since years - manually changes of vlan assignments are not allowed on EAP enabled ports for security reasons. Once the device is authenticated on one of these ports, the related radius return attributes for vlan-create, vlan-id, i-sid, etc. are "allowed" to set these settings.

Good luck