Depends on what OS you are using.  I've had experience with Windows OS where it 
would computer authenticate, but wouldn't user auth.  It seemed like once the 
machine was authed, then it no longer would send a packet to reauth once the 
user logged in.  If XP SP3 or newer Windows OS, check to see if the 802.1x 
settings are set to Computer or User. http://support.microsoft.com/kb/929847  
If you get the vlan switch to working, be aware with remote desktop users, once 
they login the vlan will revert to the vlan that the computer was assigned to.  
If the user is already logged in and is in a different ip range than the 
computer authed vlan, and they RDC into the computer, their IP will change to 
the computer authed vlan and they'll lose connection.

From: Patrick Printz [mailto:[email protected]]
Sent: Thursday, June 02, 2011 9:55 AM
To: Enterasys Customer Mailing List
Subject: [enterasys] RFC3580 & User Roles

I have RFC3580 working in a test environment. It assigns the proper VLAN and 
all is good. I hit a problem though when I log in a user onto the test PC. The 
PC turns on and RFC3580 assigns the proper vlan and role to the port based on 
the security group where the computer account resides in AD. I log on with a 
user (there are no cached credentials) and the user can log on; but the role 
never changes to the user's role, it stays as the RFC3580 role.  I have been 
digging around trying to figure out what I am missing; these roles worked when 
RFC3580 is not enabled. I thought that once the user logged in that the role 
would change?


Patrick Printz
Network Services

Quinsigamond Community College
670 West Boylston Street
Worcester, MA 01606-2092
w. 508-854-7517
c. 508-726-9529



"Opportunities multiply as they are seized."
- Sun Tzu


 *   --To unsubscribe from enterasys, send email to 
[email protected]<mailto:[email protected]> with the body: unsubscribe enterasys 
[email protected]<mailto:[email protected]>



NOTICE:
The Arkansas Department of Human Services has determined that this
message may contain  confidential or otherwise protected
information. We have used transport encryption to help protect this
message while in transit to you. Please take all reasonable
measures to protect any protected or confidential data that might
be in this message, including the limitation of re-disclosure to
the minimum number of recipients necessary. Please report any
inappropriate disclosure to https://dhs.arkansas.gov/reporting or
as required by law.
---
To unsubscribe from enterasys, send email to [email protected] with the body: 
unsubscribe enterasys [email protected]

Reply via email to