Juniper JUNOS OS 10.3 - SOFTWARE Manual page 2658

Complete Software Guide for Junos
Table 335: Components of the Static MAC Authentication Configuration Topology
Property
Switch hardware
VLAN name
Connections to integrated printer/fax/copier machines
(no PoE required)
Configuration
CLI Quick
Configuration
Step-by-Step
Procedure
Results
2562
®
OS for EX Series Ethernet Switches, Release 10.3
Settings
EX4200, 24 Gigabit Ethernet ports: 8 PoE ports (
ge-0/0/23
default
ge-0/0/19
ge-0/0/20
The printer with the MAC address 00:04:0f:fd:ac:fe is connected to access interface
ge-0/0/19 . A second printer with the MAC address 00:04:ae:cd:23:5f is connected to
access interface
ge-0/0/20
802.1X authentication.
To configure static MAC authentication, perform these tasks:
To quickly configure static MAC authentication, copy the following commands and paste
them into the switch terminal window:
[edit]
set protocols dot1x authenticator authenticaton-profile-name profile1
set protocols dot1x authenticator static [00:04:0f:fd:ac:fe 00:04:ae:cd:23:5f]
set protocols dot1x interface all supplicant multiple
Configure static MAC authentication:
Configure the authentication profile name (access profile name) to use for
1.
authentication:
[edit protocols]
user@switch# set dot1x authenticator authentication-profile-name profile1
Configure MAC addresses
2.
addresses:
[edit protocols]
user@switch# set dot1x authenticator static [00:04:0f:fd:ac:fe 00:04:ae:cd:23:5f]
Configure the 802.1X authentication method:
3.
[edit protocols]
user@switch# set dot1x interface all supplicant multiple
Display the results of the configuration:
user@switch> show
interfaces {
ge-0/0/19 {
unit 0 {
family ethernet-switching {
vlan members default;
}
}
)
, MAC address 00:04:0f:fd:ac:fe
, MAC address 00:04:ae:cd:23:5f
. Both printers will be added to the static list and bypass
and
00:04:0f:fd:ac:fe
through
ge-0/0/0
as static MAC
00:04:ae:cd:23:5f
Copyright © 2010, Juniper Networks, Inc.