Hi Alan, I could not understand your question, Can you explain bit more.But if you asking how the port config looks then it is currenrly configured as trunk mode where both 1968 and 1969 is attached. cisco-3548-x# show running-config interface ethernet 1/11interface Ethernet1/11 switchport mode trunk dot1x pae authenticator dot1x port-control auto dot1x re-authentication dot1x host-mode multi-host switchport trunk allowed vlan 1968-1969 duplex full cisco-3548-x# show interface ethernet 1/11 switchportName: Ethernet1/11 Switchport: Enabled Switchport Monitor: Not enabled Switchport Isolated : Not enabled Switchport Block Multicast: Not enabled Switchport Block Unicast: Not enabled Mac learning: Enabled Operational Mode: trunk Access Mode VLAN: 1968 (youlab-10_67_178) Trunking Native Mode VLAN: 1 (default) Trunking VLANs Allowed: 1968-1969 Voice VLAN: none Extended Trust State : not trusted [COS = 0] Administrative private-vlan primary host-association: none Administrative private-vlan secondary host-association: none Administrative private-vlan primary mapping: none Administrative private-vlan secondary mapping: none Administrative private-vlan trunk native VLAN: none Administrative private-vlan trunk encapsulation: dot1q Administrative private-vlan trunk normal VLANs: none Administrative private-vlan trunk private VLANs: none Operational private-vlan: none Regards,Deepak Rawat On Thursday, December 16, 2021, 01:11:20 PM GMT+1, Alan Buxey <alan.buxey@gmail.com> wrote: Hi There is a mix here of whether the port is in access mode with a vlan assigned (usual dot1x activity) , or in trunk mode with multiple vlans permitted alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html