Juniper JUNOS OS 10.3 - SOFTWARE Manual page 2649

Verification
Purpose
Action
Copyright © 2010, Juniper Networks, Inc.
authenticator {
authentication-profile-name profile52;
interface {
ge-0/0/1.0 {
server-fail vlan-name vlan-sf;
}
}
}
}
}
}
To confirm that the configuration is working properly, perform these tasks:
Verifying That the Supplicants Are Moved to an Alternative VLAN During a RADIUS
Timeout on page 2553
Verifying That the Supplicants Are Moved to an Alternative VLAN During a RADIUS
Timeout
Verify that the interface moves supplicants to an alternative VLAN during a RADIUS
timeout.
Display the VLANs configured on the switch; the interface
default VLAN:
user@switch> show vlans
Name Tag Interfaces
default
ge-0/0/0.0, ge-0/0/1.0*, ge-0/0/5.0*, ge-0/0/10.0,
ge-0/0/12.0*, ge-0/0/14.0*, ge-0/0/15.0, ge-0/0/20.0
v2 77
None
vlan—sf 50
None
mgmt
me0.0*
Display 802.1X protocol information on the switch to view supplicants that are
authenticated on interface
user@switch> show dot1x interface brief
802.1X Information:
Interface Role
ge-0/0/1.0 Authenticator
ge-0/0/10.0 Authenticator
ge-0/0/14.0 Authenticator
ge-0/0/15.0 Authenticator
ge-0/0/20.0 Authenticator
A RADIUS server timeout occurs. Display the Ethernet switching table to show that the
supplicant with the MAC address
through the VLAN is now being learned on the VLAN named
default
Chapter 82: Examples: Access Control Configuration
:
ge-0/0/1.0
State MAC address
Authenticated 00:00:00:00:00:01
Initialize
Connecting
Initialize
Initialize
00:00:00:00:00:01
is a member of the
ge-0/0/1.0
User
abc
previously accessing the LAN
:
vlan-sf
2553