- Configure dot1x on access switch host-facing ports (Et3/Et4) with
RADIUS dynamic VLAN assignment
- Switch host-facing port-channels to access mode (from trunk) to
align with dot1x dynamic VLAN behavior
- Add wpa_supplicant configs and binds for all hosts
- Remove VLAN subinterfaces from hosts, assign IPs directly to bond0
(untagged traffic for dot1x access ports)
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>