Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

802.1x Guest Vlan and Routed access layer design


For many reasons, I have to re-design my campus network in a more ISP like way. The plan is to move to a routed access layer in the next two years. I have 802.1x with guest vlan on my access ports(3750). I was reading on the subject and I found that the guest vlan feature was not availeble with internal vlan(routed port).

Is this limitation realy there, is there a way I can get around it without complicating my design even more. Do cisco have plan to lift this???

Cisco Employee

Re: 802.1x Guest Vlan and Routed access layer design

You cannot use/configure 802.1X on a routed port today. Typically, 802.1X is to be used for LAN edge ports.

The Guest-VLAN should work with a routed access design though. If your Guest-VLAN is chosen to be separate from say otherwise statically configured access VLANs, you would need to configure it via separate SVI with corresponding IP info (in a routed access model).

Hope this helps,

CreatePlease login to create content