One embodiment disclosed relates to a method for a switch to respond to a
new client. A new client is detected at a port of the switch. The switch
temporarily assigns the port to be an untagged member of a virtual local
area network (VLAN) which is configured for unauthorized clients.
Initialization services are provided to the new client via the
unauthorized-client VLAN. The new client may be authenticated by way of
an authentication session using the unauthorized-client VLAN. If the new
client is authenticated, then the untagged membership of the port in the
unauthorized-client VLAN is dropped, and the port is assigned to be an
untagged member of a specified VLAN.