We are currently looking at 802.1x as solution to manual port security but I have heard horror stories about 802.1x deployments due to third party supplicant etc. Were looking at using Microsoft certificate services and Microsoft RADIUS services for the global deployment. Most of the systems are running XP SP2. Has anyone done large scale 802.1x deployments?? If so any advice on what to do and what not to due before I get this into the lab?