Juniper JUNOS OS 10.3 - SOFTWARE Manual page 2686

Complete Software Guide for Junos
Configuration
CLI Quick
Configuration
Step-by-Step
Procedure
2590
®
OS for EX Series Ethernet Switches, Release 10.3
To configure VoIP without 802.1X authentication:
To quickly configure VoIP, copy the following commands and paste them into the switch
terminal window:
[edit]
set vlans data-vlan vlan-id 77
set vlans voice-vlan vlan-id 99
set vlans data-vlan interface ge-0/0/2.0
set interfaces ge-0/0/2 unit 0 family ethernet-switching vlan members data-vlan
set interfaces ge-0/0/2 unit 0 family ethernet-switching port-mode access
set ethernet-switching-options voip interface ge-0/0/2.0 vlan voice-vlan
set ethernet-switching-options voip interface ge-0/0/2.0 forwarding-class assured-forwarding
set protocols lldp-med interface ge-0/0/2.0
set protocols dot1x authenticator authentication-profile-name auth-profile
set protocols dot1x authenticator static 00:04:f2:11:aa:a7
set protocols dot1x authenticator interface ge-0/0/2.0 supplicant multiple
To configure VoIP without 802.1X:
Configure the VLANs for voice and data:
1.
[edit vlans]
user@switch# set data-vlan vlan-id 77
user@switch# set voice-vlan vlan-id 99
Associate the VLAN
2. data-vlan
[edit vlans]
user@switch# set data-vlan interface ge-0/0/2.0
Configure the interface as an access interface, configure support for Ethernet
3.
switching, and add the
[edit interfaces]
user@switch# set ge-0/0/2 unit 0 family ethernet-switching vlan members data-vlan
user@switch# set ge-0/0/2 unit 0 family ethernet-switching port-mode access
Configure VoIP on the interface and specify the
4.
class to provide the most dependable class of service:
[edit ethernet-switching-options]
user@switch# set voip interface ge-0/0/2.0 vlan voice-vlan
user@switch# set voip interface ge-0/0/2.0 forwarding-class assured-forwarding
Configure LLDP-MED protocol support:
5.
[edit protocols]
user@switch# set lldp-med interface ge-0/0/2.0
Set the authentication profile (see "Configuring 802.1X Interface Settings (CLI
6.
Procedure)" on page 2609 and "Configuring 802.1X RADIUS Accounting (CLI
Procedure)" on page 2617):
[edit protocols]
set dot1x authenticator authentication-profile-name auth-profile
Add the MAC address of the phone to the static MAC bypass list:
7.
with the interface:
VLAN:
data-vlan
assured-forwarding forwarding
Copyright © 2010, Juniper Networks, Inc.