<div dir="ltr">Thanks. <br></div><div class="gmail_extra"><br><div class="gmail_quote">On Wed, Feb 4, 2015 at 12:22 AM, Jan Ceuleers <span dir="ltr"><<a href="mailto:jan.ceuleers@computer.org" target="_blank">jan.ceuleers@computer.org</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><span class="">On 03/02/15 19:40, Sarah Thomas wrote:<br>
> Final understanding - DHCP broadcast messages are not accepted by the<br>
> switch till the port is authenticated. Only after the port is<br>
> authenticated, broadcast message will be accepted , for which DHCP reply<br>
> message holding the IP address for the client will come. Please correct<br>
> the understanding if its wrong.<br>
<br>
</span>Correct, but it can be generalised even further. The switch port should<br>
reject /all/ traffic from/to a port other than 802.1x until that port is<br>
authenticated.<br>
<div class="HOEnZb"><div class="h5"><br>
_______________________________________________<br>
HostAP mailing list<br>
<a href="mailto:HostAP@lists.shmoo.com">HostAP@lists.shmoo.com</a><br>
<a href="http://lists.shmoo.com/mailman/listinfo/hostap" target="_blank">http://lists.shmoo.com/mailman/listinfo/hostap</a><br>
</div></div></blockquote></div><br></div>