Wired NAC: Return port to auth VLAN when device is disconnected.

[clearcall]

Hi,

When authenticating a wired user, it's possible to change VLANs after successful authentication from the "auth VLAN" to the "corporate VLAN" using an authorisation profile.

Is it possible to automatically return the switch port back to the "auth VLAN" once the device is disconnected?

[Cory Peterson · Accepted solution]

This already happens by default. It does not actually change the config on the switch but only what vlan tag is applied to traffic from the specific MAC address that authenticated. 

But as a side note, using dynamic VLANs can be problematic and is not recommended if at all possible. Try using dACLs instead.