Juniper JUNOS OS 10.3 - SOFTWARE Manual page 2708

Complete Software Guide for Junos
Table 342: 802.1X Port Settings (continued)
Field Function
Supplicant Mode Specifies the mode to be adopted for supplicants:
Single—allows only one host for authentication.
Multiple—allows multiple hosts for
authentication. Each host is checked before
being admitted to the network.
Single authentication for multiple hosts—Allows
multiple hosts but only the first is authenticated.
Authentication
Enable Specifies enabling reauthentication on the selected
re-authentication interface.
Action on Specifies the action to be taken in case the host
authentication does not respond, leading to an authentication
failure failure.
Timeouts Specifies timeout values for each action.
Related
Documentation
Configuring Static MAC Bypass of Authentication (CLI Procedure)
2612
®
OS for EX Series Ethernet Switches, Release 10.3
Configuring 802.1X Interface Settings (CLI Procedure) on page 2609
Example: Setting Up 802.1X for Single Supplicant or Multiple Supplicant Configurations
on an EX Series Switch on page 2568
Understanding Authentication on EX Series Switches on page 2526
You can configure a static MAC bypass list (sometimes called the exclusion list) on the
switch to specify MAC addresses of devices allowed access to the LAN without 802.1X
or MAC RADIUS authentication requests to the RADIUS server.
To configure the static MAC bypass list:
Specify a MAC address to bypass authentication:
Your Action
Select a mode.
1. Select to enable reauthentication.
2. Enter the timeout for reauthentication in
seconds.
Select one:
Move to the Guest VLAN—Select the VLAN to
move the interface to.
Deny—The host is not permitted access.
Enter the value in seconds for:
Port waiting time after an authentication failure
EAPOL retransmitting interval
Max. EAPOL requests
Maximum number of retries
Port timeout value for the response from the
supplicant
Port timeout value for the response from the
RADIUS server
Copyright © 2010, Juniper Networks, Inc.