Guest VLAN on a MHSA Port Usage Scenario

The following is a usage example when Guest VLAN is configured with an EAP MHSA port:
  • There are no authenticated EAP or NEAP clients on a port.

  • The port is removed from the initial VLANs and moved to Guest VLAN ID.

  • The default port VLAN ID changes to Guest VLAN ID.

  • All MACs seen on the port have Guest VLAN access.

  • Port is removed from the Guest VLAN ID.

  • If no RADIUS assigned VLAN is present, then the VLAN membership and the default port VLAN ID is restored to default settings.

  • If the RADIUS assigned VLAN is present, then the VLAN membership and the default port VLAN ID is changed according to its value.

  • Guest VLAN loses its purpose because all MACs are allowed automatically without authentication

In MHSA mode, the Guest VLAN applies only when no authenticated client is present on the port.