To Corporate Visitors On A J-Ex Series Switch - Dell PowerConnect J-EX4200-24T Software Manual

Dell PowerConnect J-Series Ethernet Switch Complete Software Guide for Junos OS
Meaning
Related
Documentation
Example: Setting Up 802.1X in Conference Rooms to Provide Internet Access to
Corporate Visitors on a J-EX Series Switch
Requirements
2276
802.1X Information:
Interface Role
ge-0/0/1.0 Authenticator
ge-0/0/10.0 Authenticator
ge-0/0/14.0 Authenticator
ge-0/0/15.0 Authenticator
ge-0/0/20.0 Authenticator
The command
show vlans
VLAN. The command
show dot1x interface brief
authenticated on interface
RADIUS server timeout occurs, and the authentication server cannot be reached by the
switch. The command
show-ethernet-switching table
is learned on VLAN
00:00:00:00:00:01
VLAN to the
default vlan-sf
the VLAN named .
vlan-sf
Example: Setting Up 802.1X for Single Supplicant or Multiple Supplicant Configurations
on a J-EX Series Switch on page 2290
Configuring Server Fail Fallback (CLI Procedure) on page 2337
Configuring 802.1X RADIUS Accounting (CLI Procedure) on page 2339
Filtering 802.1X Supplicants Using RADIUS Server Attributes on page 2340
Understanding Server Fail Fallback and Authentication on J-EX Series Switches on
page 2258
802.1X on J-EX Series switches provides LAN access to users who do not have credentials
in the RADIUS database. These users, referred to as guests, are authenticated and typically
provided with access to the Internet.
This example describes how to create a guest VLAN and configure 802.1X authentication
for it.
Requirements on page 2276
Overview and Topology on page 2277
Configuration of a Guest VLAN That Includes 802.1X Authentication on page 2279
Verification on page 2280
This example uses the following hardware and software components:
One J-EX Series switch acting as an authenticator interface access entity (PAE). The
interfaces on the authenticator PAE form a control gate that blocks all traffic to and
from supplicants until they are authenticated.
State MAC address
Connecting
Initialize
Connecting
Initialize
Initialize
displays interface
ge-0/0/1.0
shows that a supplicant (
and has the MAC address
ge-0/0/1.0
. The supplicant has been moved from the
vlan-sf
VLAN. The supplicant is then connected to the LAN through
User
as a member of the
default
) is
abc
00:00:00:00:00:01
shows that MAC address
. A