5.1.3 MAC VLAN Dynamic VLAN Configuration and Layer 2 Authentication

The Switch use the Layer 2 authentication functionality and modes described in the table below to dynamically configure the post-authentication VLAN to which authenticated terminals connect via an authenticating port on a MAC VLAN. At the point when no authenticated terminals are attached to an authenticating port, the dynamically assigned VLAN is deleted.

Table 5-3: Layer 2 authentication functions and authentication modes that can be dynamically set for VLAN

Layer 2 authentication functionality	Authentication modes
IEEE802.1X	VLAN-based authentication (dynamic)
Web Authentication	Dynamic VLAN mode
MAC-based Authentication	Dynamic VLAN mode

Note that a port configured as a MAC-based authentication port by the switchport mac vlan configuration command cannot perform VLAN switching to a post-authentication VLAN that is not specified in the command. Moreover, if the switchport mac vlan configuration command is applied to a MAC-based authentication port with a dynamically assigned VLAN, the authentication status is reset for all terminals attached to the VLAN dynamically assigned as the port's post-authentication VLAN.