Hi, > interface FastEthernet0/24 > switchport access vlan 100 > switchport mode access > dot1x pae authenticator > dot1x port-control auto > dot1x auth-fail vlan 120 => here supposed to send it to vlan 120 > spanning-tree portfast
looking okay...do you need to set these global values too? dot1x system-auth-control dot1x guest-vlan supplicant PS this really is no longer a FreeRADIUS issue per se - its now very vendor specific - you should be bugging the appropriate people or list that deals with your kit :-) alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html