Allied Telesis AT-S101 - Manual (Page 164)

Chapter 14: 802.1x Port-based Network Access Control
164
Guest VLANs
An authenticator port in the unauthorized state typically accepts and
transmits only 802.1x packets while waiting to authenticate a supplicant.
However, you can configure an authenticator port to be a member of a
Guest VLAN when no supplicant is logged on. Any client using the port is
not required to log on and has full access to the resources of the Guest
VLAN.
If the switch receives 802.1x packets on the port, signalling that a
supplicant is logging on, it moves the port to its predefined VLAN and
places it in the unauthorized state. The port remains in the unauthorized
state until the log on process between the supplicant and the RADIUS
server is completed. When the supplicant logs off, the port automatically
returns to the Guest VLAN.
Note
The Guest VLAN feature is only supported on an authenticator port
in the single operating mode.