Thank you very much for helping me.
Perhaps I am trying to build it to complicate and this can be achieved much easier. Do you see another way of having this use case done? I still think that this is a use case, many companies today have: assigning VLANs depending on user type (staff or guest). In WLAN this is quite easy to build, as
there is always an client authentification. In ethernet I just have the problem, that the guest notebooks are mostly not sending any authentication at all and so I cannot authenticate and assign VLAN with Radius attributes. The process should be the other way around. When connecting the thernet port, all notebooks first end up in the guest VLAN independent of sending any authentication. If the client sends an authentication, I can than switch the VLAN (or even the UP) depending of the usertype controlled by Radius. Like this, I do not have to deliver two ethernet ports for each public room in the building. Hopefully you understand my use case.
