When using the 802.

The 802.1X Controlled Port is always blocked, but the Uncontrolled Port opens after the EAP authentication process completes.

The 802.1X Controlled Port remains blocked until an IP address is requested and accepted by the Supplicant.

The 4-Way Handshake must be performed before the 802.1X Controlled Port changes to the unblocked state.

The 802.1X Controlled Port is blocked until Vender Specific Attributes (VSAs) are exchanged inside a RADIUS packet between the Authenticator and Authentication Server.