I've finally got 802.1x to work! (on ethernet)
I think I've worked out vlans, subnets, radius and 802.1x all at the same time. Just need to work in the Guest vlans (on HP switches - allows the client to access some services when not authenticated sucessfully on 802.1x - dhcp for example can be on it, as you can't authenticate without an ip address :))
I'll leave dynamic vlans alone for the moment, that makes it really complicated!
Any one else using 802.1x? Is it ok tp manage?
Re: At last!
Actually you can authenticate without dhcp, the request comes from the switch and 802.1x is a seperate protocol.
Managed to assign vlans from radius, just going to see if I can get it working with computer based auth rather than user. Then I can assign rooms of computers to a vlan when they authenticate.