diff --git a/configs/bright/bright-mdf-a6300-sw1.cfg b/configs/bright/bright-mdf-a6300-sw1.cfg
index 1a1f646..a7046d8 100644
--- a/configs/bright/bright-mdf-a6300-sw1.cfg
+++ b/configs/bright/bright-mdf-a6300-sw1.cfg
@@ -1773,13 +1773,27 @@ interface 2/1/16
     description Auto
     no shutdown
     no routing
-    vlan access 20
+    vlan access 168
     spanning-tree bpdu-guard
     spanning-tree port-type admin-edge
     spanning-tree root-guard
     spanning-tree tcn-guard
     loop-protect
     port-access onboarding-method concurrent enable
+    aaa authentication port-access allow-cdp-bpdu
+    aaa authentication port-access allow-lldp-bpdu
+    aaa authentication port-access client-limit 3
+    aaa authentication port-access dot1x authenticator
+        cached-reauth
+        cached-reauth-period 86400
+        reauth
+        enable
+    aaa authentication port-access mac-auth
+        cached-reauth
+        cached-reauth-period 86400
+        quiet-period 30
+        reauth
+        enable
     client track ip enable
     client track ip update-interval 120
     power-over-ethernet pre-std-detect
@@ -2627,12 +2641,27 @@ interface 2/1/47
     description Auto
     no shutdown
     no routing
-    vlan access 539
+    vlan access 168
+    spanning-tree bpdu-guard
     spanning-tree port-type admin-edge
     spanning-tree root-guard
     spanning-tree tcn-guard
     loop-protect
     port-access onboarding-method concurrent enable
+    aaa authentication port-access allow-cdp-bpdu
+    aaa authentication port-access allow-lldp-bpdu
+    aaa authentication port-access client-limit 3
+    aaa authentication port-access dot1x authenticator
+        cached-reauth
+        cached-reauth-period 86400
+        reauth
+        enable
+    aaa authentication port-access mac-auth
+        cached-reauth
+        cached-reauth-period 86400
+        quiet-period 30
+        reauth
+        enable
     client track ip enable
     client track ip update-interval 120
     power-over-ethernet pre-std-detect
@@ -2640,12 +2669,27 @@ interface 2/1/48
     description Auto
     no shutdown
     no routing
-    vlan access 539
+    vlan access 168
+    spanning-tree bpdu-guard
     spanning-tree port-type admin-edge
     spanning-tree root-guard
     spanning-tree tcn-guard
     loop-protect
     port-access onboarding-method concurrent enable
+    aaa authentication port-access allow-cdp-bpdu
+    aaa authentication port-access allow-lldp-bpdu
+    aaa authentication port-access client-limit 3
+    aaa authentication port-access dot1x authenticator
+        cached-reauth
+        cached-reauth-period 86400
+        reauth
+        enable
+    aaa authentication port-access mac-auth
+        cached-reauth
+        cached-reauth-period 86400
+        quiet-period 30
+        reauth
+        enable
     client track ip enable
     client track ip update-interval 120
     power-over-ethernet pre-std-detect