I have a problem at the moment deploying a Guest vlan in 802.1x that hopefully someone will have a suggestion for. My issue is as follows:-
I have a 3750 port configured for 802.1x authentication and with a voice vlan and guest vlan. I am not 802.1x authenticating the phone. The data vlan ( PC connected to the phone ) will only drop into the guest vlan if it sees *NO* EAPOL packets since the physical switch port has come up. This is a problem in a hot desk type environment where the connection may be used for a 802.1x user first and then later by a non 802.1x user ( guest ) - because the IP phone holds the port up the switch will no longer drop into the guest VLAN. I understand that this is a behavour change that occured round 12.2.25. Anybody come across this and found a workaround ?