Supported Features Related To 802.1X Authentication; Authentication Process Flow For Ex Series Switches - Juniper JUNOS OS 10.3 - SOFTWARE Manual

Supported Features Related to 802.1X Authentication

Related
Documentation

Authentication Process Flow for EX Series Switches

Copyright © 2010, Juniper Networks, Inc.
the form of firewall filters on every switch in the LAN to which the supplicant may
connect to the LAN. This feature is based on RLI 4583, AAA RADIUS BRAS VSA Support.
802.1X does not replace other security technologies. 802.1X works together with port
security features, such as DHCP snooping, dynamic ARP inspection (DAI), and MAC
limiting, to guard against spoofing.
Supported features related to authentication include:
Static MAC bypass—Provides a bypass mechanism to authenticate devices that are
not 802.1X-enabled (such as printers). Static MAC bypass connects these devices to
802.1X-enabled ports, bypassing 802.1X authentication.
MAC RADIUS authentication—Provides a means to enable or disable MAC
authentication independently of whether 802.1X authentication is enabled.
Understanding Authentication on EX Series Switches on page 2526
Understanding 802.1X and VoIP on EX Series Switches on page 2542
Understanding 802.1X and LLDP and LLDP-MED on EX Series Switches on page 2540
Understanding 802.1X and RADIUS Accounting on EX Series Switches on page 2539
Understanding Guest VLANs for 802.1X on EX Series Switches on page 2538
Understanding 802.1X and VSAs on EX Series Switches on page 2544
Understanding Server Fail Fallback and 802.1X Authentication on EX Series Switches
on page 2536
You can control access to your network through an EX Series switch by using several
different authentication methods—802.1X, MAC RADIUS, or captive portal.
Figure 48 on page 2534 illustrates the authentication process:
Chapter 81: 802.1X and MAC RADIUS Authentication Overview
2533