https://community.extremenetworks.com/t5/extremeswitching-other/vlan-tunnel-attr-change-on-reauthentication-has-no-effect/m-p/10238#M1266 Say the VLAN-Tunnel-Attr as previously returned by Radius is X.<BR /> We change the Radius config to return Y.<BR /> After reauthentication (via "set macauth macreauthenticate MACADDRESS") we correctly see the new VLAN-Tunnel-Attr Y using "show vlanauth session" etc.<BR /> However the device apparently still is in the old VLAN X. (still pings)<BR /> When I disable/enable the port, the VLAN is set alright according to the current Radius setting to Y. (device no longer pings (which is normal since here Y is an isolated VLAN)<BR /> Is this normal that I have to port down/up, and that reauth has no effect here?<BR /> <BR /> (C3 6.61.13)<BR /> <BR /> <B>UPDATE</B> Seems to behave that way only when either VLAN X or Y is set as the static PVID for that port too. Why do I do that? Well, I don't want to completely rely on Radius. I want to have all connections working even if Radius is not there, except for MACs that I specifically like to "blackhole" which I would do by a Radius-Accept with a "blackhole" VLAN. (In essence the static PVID is the default/fallback VLAN in case all else fails.)<BR /> Mon, 08 Dec 2014 09:39:00 GMT jeronimo 2014-12-08T09:39:00Z https://community.extremenetworks.com/t5/extremeswitching-other/vlan-tunnel-attr-change-on-reauthentication-has-no-effect/m-p/10238#M1266 Say the VLAN-Tunnel-Attr as previously returned by Radius is X.<BR /> We change the Radius config to return Y.<BR /> After reauthentication (via "set macauth macreauthenticate MACADDRESS") we correctly see the new VLAN-Tunnel-Attr Y using "show vlanauth session" etc.<BR /> However the device apparently still is in the old VLAN X. (still pings)<BR /> When I disable/enable the port, the VLAN is set alright according to the current Radius setting to Y. (device no longer pings (which is normal since here Y is an isolated VLAN)<BR /> Is this normal that I have to port down/up, and that reauth has no effect here?<BR /> <BR /> (C3 6.61.13)<BR /> <BR /> <B>UPDATE</B> Seems to behave that way only when either VLAN X or Y is set as the static PVID for that port too. Why do I do that? Well, I don't want to completely rely on Radius. I want to have all connections working even if Radius is not there, except for MACs that I specifically like to "blackhole" which I would do by a Radius-Accept with a "blackhole" VLAN. (In essence the static PVID is the default/fallback VLAN in case all else fails.)<BR /> Mon, 08 Dec 2014 09:39:00 GMT https://community.extremenetworks.com/t5/extremeswitching-other/vlan-tunnel-attr-change-on-reauthentication-has-no-effect/m-p/10238#M1266 jeronimo 2014-12-08T09:39:00Z