To Corporate Visitors On An Ex Series Switch - Juniper JUNOS OS 10.3 - SOFTWARE Manual

Complete Software Guide for Junos
Meaning
Related
Documentation
Example: Setting Up 802.1X in Conference Rooms to Provide Internet Access to
Corporate Visitors on an EX Series Switch
2554
®
OS for EX Series Ethernet Switches, Release 10.3
user@switch> show ethernet-switching table
Ethernet-switching table: 3 entries, 1 learned
VLAN MAC address
v1 *
vlan—sf 00:00:00:00:00:01 Learn
default *
Display 802.1X protocol information to show that interface
will open LAN access to supplicants:
user@switch> show dot1x interface brief
802.1X Information:
Interface Role
ge-0/0/1.0 Authenticator
ge-0/0/10.0 Authenticator
ge-0/0/14.0 Authenticator
ge-0/0/15.0 Authenticator
ge-0/0/20.0 Authenticator
The command
show vlans
VLAN. The command
show dot1x interface brief
authenticated on interface
A RADIUS server timeout occurs, and the authentication server cannot be reached by
the switch. The command
00:00:00:00:00:01 is learned on VLAN
the VLAN to the
default vlan-sf
through the VLAN named
Example: Setting Up 802.1X for Single Supplicant or Multiple Supplicant Configurations
on an EX Series Switch on page 2568
Configuring Server Fail Fallback (CLI Procedure) on page 2615
Configuring 802.1X RADIUS Accounting (CLI Procedure) on page 2617
Filtering 802.1X Supplicants Using RADIUS Server Attributes on page 2618
Understanding Server Fail Fallback and 802.1X Authentication on EX Series Switches
on page 2536
802.1X on EX Series switches provides LAN access to users who do not have credentials
in the RADIUS database. These users, referred to as guests, are authenticated and typically
provided with access to the Internet.
This example describes how to create a guest VLAN and configure 802.1X authentication
for it.
Requirements on page 2555
Overview and Topology on page 2555
Type
Flood
Flood
State MAC address
Connecting
Initialize
Connecting
Initialize
Initialize
displays interface
ge-0/0/1.0
shows that a supplicant (
ge-0/0/1.0 and has the MAC address
show-ethernet-switching table
vlan-sf . The supplicant has been moved from
VLAN. The supplicant is then connected to the LAN
.
vlan-sf
Age Interfaces
- All-members
1:07 ge-0/0/1.0
- All-members
is connecting and
ge-0/0/1.0
User
as a member of the
default
) is
abc
00:00:00:00:00:01
shows that MAC address
Copyright © 2010, Juniper Networks, Inc.
.