Juniper JUNOS OS 10.3 - SOFTWARE Manual page 2648

Complete Software Guide for Junos
Table 333: Components of the Topology (continued)
Property
Supplicant
One RADIUS server
Configuration
CLI Quick
Configuration
Step-by-Step
Procedure
Results
2552
®
OS for EX Series Ethernet Switches, Release 10.3
Settings
Supplicant attempting access on interface
Backend database with an address of
ge-0/0/10
In this example, configure interface
to the LAN during a RADIUS timeout to another VLAN. A RADIUS timeout prevents the
normal exchange of EAP messages that carry information from the RADIUS server to the
switch and permit the authentication of a supplicant. The
interface . When a RADIUS timeout occurs, supplicants on the interface will be
ge-0/0/1
moved from the default VLAN to the VLAN named
NOTE: For more information about authentication, authorization, and
accounting (AAA) services, see the Junos OS System Basics Configuration
Guide at http://www.juniper.net/techpubs/software/junos/index.html
To configure server fail fallback on the switch:
To quickly configure server fail fallback on the switch, copy the following commands and
paste them into the switch terminal window:
[edit protocols dot1x authenticator]
set interface ge-0/0/1 server-fail vlan-name vlan-sf
To configure an interface to divert supplicants to a specific VLAN when a RADIUS timeout
occurs (here, the VLAN is
vlan-sf
Define the VLAN to which supplicants are diverted:
1.
[edit protocols dot1x authenticator]
user@switch# set interface server-fail vlan-name vlan-sf
Display the results of the configuration:
user@switch> show configuration
interfaces {
ge-0/0/1 {
unit 0 {
family ethernet-switching {
vlan {
members default;
}
}
}
}
protocols {
dot1x {
ge-0/0/1
connected to the switch at port
10.0.0.100
ge-0/0/1 to move a supplicant attempting access
default
vlan-sf .
):
Copyright © 2010, Juniper Networks, Inc.
VLAN is configured on
.