@Mitya Thank you so much for sharing the firmware. It's better, because client traffic is now really blocked until 'MAC authentication passed', but still too buggy for use in production. This is...

@Andone, exactly that is what happens. The client keeps on failing the authentication process while a lot of his traffic passes the switch anyway. I'll contact support about that. Thank you very much.

I'm running 802.1x with MAB and Port Method 'MAC Based' questioning RADIUS. I noticed some traffic going through even if the MAC is refused and Port Status remains 'Unauthorized'. It's a phone device...

@Mitya, thank you very much. Do other vendors offer my required combination of features on edge switches completely? BTW: Guest VLAN is implicitly possible, too. I made my RADIUS offer this special...

@Andone, surely, it would. But we're talking about a professional environment with hundreds of MACs and changes every day, so a local database (as i.e. 'mac-vlan mac-address 00:11:11:01:01:12 vlan 2'...

@Andone ,what a pity! I hopped this could work because of the 'mac-vlan' commands which do just the same with a local database instead the use of RADIUS. So technically it should be possible in my...