Juniper JUNOS OS 10.3 - SOFTWARE Manual page 2710

Complete Software Guide for Junos
Related
Documentation
2614
®
OS for EX Series Ethernet Switches, Release 10.3
Configured basic access between the EX Series switch and the RADIUS server. See
"Example: Connecting a RADIUS Server for 802.1X to an EX Series Switch" on page 2545.
To configure MAC RADIUS authentication using the CLI:
On the switch, configure the interfaces to which the nonresponsive hosts are attached
for MAC RADIUS authentication, and add the
to have it use only MAC RADIUS authentication:
[edit]
user@switch# set protocols dot1x authenticator interface ge-0/0/19 mac-radius
user@switch# set protocols dot1x authenticator interface ge-0/0/20 mac-radius
restrict
On a RADIUS authentication server, create user profiles for each nonresponsive host
using the MAC address (without colons) of the nonresponsive host as the username
and password (here, the MAC addresses are
[root@freeradius]#
edit /etc/raddb
vi users
00040ffdacfe Auth-type:=Local, User-Password = "00040ffdacfe"
0004aecd235f Auth-type:=Local, User-Password = "0004aecd235f"
Example: Configuring MAC RADIUS Authentication on an EX Series Switch on page 2564
Verifying 802.1X Authentication on page 2634
Understanding Authentication on EX Series Switches on page 2526
qualifier for interface
restrict
and
00:04:0f:fd:ac:fe 00:04:ae:cd:23:5f
Copyright © 2010, Juniper Networks, Inc.
ge-0/0/20
):