- Configure dot1x on access switch host-facing ports (Et3/Et4) with
RADIUS dynamic VLAN assignment
- Switch host-facing port-channels to access mode (from trunk) to
align with dot1x dynamic VLAN behavior
- Add wpa_supplicant configs and binds for all hosts
- Remove VLAN subinterfaces from hosts, assign IPs directly to bond0
(untagged traffic for dot1x access ports)
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Add a FreeRADIUS server on the management network (172.16.0.200)
with test users mapped to existing VLANs (40, 34, 78) for future
802.1X/MAB dynamic VLAN assignment on access switches.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
