From bdf45c44e26010fca6034670e3ca0ed049a23901 Mon Sep 17 00:00:00 2001
From: John Poland <jdpoland@gmail.com>
Date: Mon, 12 Jan 2026 19:43:38 -0500
Subject: [PATCH] bright/bright-mdf-a6300-sw1.cfg Mon Jan 12 07:43:35 PM EST
 2026

---
 configs/bright/bright-mdf-a6300-sw1.cfg | 50 +++++++++++++++++++++++--
 1 file changed, 47 insertions(+), 3 deletions(-)

diff --git a/configs/bright/bright-mdf-a6300-sw1.cfg b/configs/bright/bright-mdf-a6300-sw1.cfg
index 1a1f646..a7046d8 100644
--- a/configs/bright/bright-mdf-a6300-sw1.cfg
+++ b/configs/bright/bright-mdf-a6300-sw1.cfg
@@ -1773,13 +1773,27 @@ interface 2/1/16
     description Auto
     no shutdown
     no routing
-    vlan access 20
+    vlan access 168
     spanning-tree bpdu-guard
     spanning-tree port-type admin-edge
     spanning-tree root-guard
     spanning-tree tcn-guard
     loop-protect
     port-access onboarding-method concurrent enable
+    aaa authentication port-access allow-cdp-bpdu
+    aaa authentication port-access allow-lldp-bpdu
+    aaa authentication port-access client-limit 3
+    aaa authentication port-access dot1x authenticator
+        cached-reauth
+        cached-reauth-period 86400
+        reauth
+        enable
+    aaa authentication port-access mac-auth
+        cached-reauth
+        cached-reauth-period 86400
+        quiet-period 30
+        reauth
+        enable
     client track ip enable
     client track ip update-interval 120
     power-over-ethernet pre-std-detect
@@ -2627,12 +2641,27 @@ interface 2/1/47
     description Auto
     no shutdown
     no routing
-    vlan access 539
+    vlan access 168
+    spanning-tree bpdu-guard
     spanning-tree port-type admin-edge
     spanning-tree root-guard
     spanning-tree tcn-guard
     loop-protect
     port-access onboarding-method concurrent enable
+    aaa authentication port-access allow-cdp-bpdu
+    aaa authentication port-access allow-lldp-bpdu
+    aaa authentication port-access client-limit 3
+    aaa authentication port-access dot1x authenticator
+        cached-reauth
+        cached-reauth-period 86400
+        reauth
+        enable
+    aaa authentication port-access mac-auth
+        cached-reauth
+        cached-reauth-period 86400
+        quiet-period 30
+        reauth
+        enable
     client track ip enable
     client track ip update-interval 120
     power-over-ethernet pre-std-detect
@@ -2640,12 +2669,27 @@ interface 2/1/48
     description Auto
     no shutdown
     no routing
-    vlan access 539
+    vlan access 168
+    spanning-tree bpdu-guard
     spanning-tree port-type admin-edge
     spanning-tree root-guard
     spanning-tree tcn-guard
     loop-protect
     port-access onboarding-method concurrent enable
+    aaa authentication port-access allow-cdp-bpdu
+    aaa authentication port-access allow-lldp-bpdu
+    aaa authentication port-access client-limit 3
+    aaa authentication port-access dot1x authenticator
+        cached-reauth
+        cached-reauth-period 86400
+        reauth
+        enable
+    aaa authentication port-access mac-auth
+        cached-reauth
+        cached-reauth-period 86400
+        quiet-period 30
+        reauth
+        enable
     client track ip enable
     client track ip update-interval 120
     power-over-ethernet pre-std-detect