Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Community Member

Private-VLAN and IEEE 802.1X/MAB

Hello,

A client of mine wants to use private-VLAN ("isolated ports") on interfaces configured as IEEE 802.1X with MAB  - but I am running into trouble with the switchport mode private-vlan host command: " Command rejected: Gi1/0/1 is Authentication. Authentication must be disabled before changing port mode enabled port."

Should it be possible to configure, or is there a limitation w/h the MAB feature?

IOS c3750-ipbasek9-mz.150-1.SE.bin

Thanks

Lennart

2 REPLIES
VIP Super Bronze

Private-VLAN and IEEE 802.1X/MAB

Hi,

try adding this command globally first:

dot1x system-auth-control

and than try 

switchport mode private-vlan host

HTH

Community Member

Private-VLAN and IEEE 802.1X/MAB

Hi Reza,

The dot1x system-auth-control command is already there - I think it's needed for the IEEE802.1X feature.

I did remove the voice VLAN, but the problem remains.

Best ones,

Lennart

441
Views
0
Helpful
2
Replies
CreatePlease to create content