Juniper JUNOS OS 10.3 - SOFTWARE Manual page 2983

Verification
Purpose
Action
Meaning
Purpose
Action
Meaning
Purpose
Copyright © 2010, Juniper Networks, Inc.
[edit ethernet-switching-options]
secure-access-port {
interface ge-0/0/0.0 {
static-ip 11.1.1.1 vlan employee mac 00:11:11:11:11:11;
}
interface ge-0/0/1.0 {
static-ip 11.1.1.2 vlan employee mac 00:22:22:22:22:22;
}
interface ge-0/0/24.0 {
dhcp-trusted;
}
vlan employee {
examine-dhcp;
ip-source-guard;
}
}
To confirm that the configuration is working properly, perform these tasks:
Verifying That 802.1X User Authentication Is Working on the Interface on page 2887
Verifying the VLAN Association with the Interface on page 2887
Verifying That DHCP Snooping and IP Source Guard Are Working on the
VLAN on page 2887
Verifying That 802.1X User Authentication Is Working on the Interface
Verify that the 802.1X configuration is working on the interface.
Use the
show dot1x interface
The output field displays the configured administrative mode for each
Supplicant mode
interface.
Verifying the VLAN Association with the Interface
Verity interface states and VLAN memberships.
Use the show ethernet-switching interfaces command to view the Ethernet switching
table entries.
The field shows the associations between VLANs and interfaces. The
VLAN members
field shows whether the interfaces are up or down.
State
For the guest VLAN configuration, the interface is associated with the guest VLAN if and
when the supplicant fails 802.1X user authentication.
Verifying That DHCP Snooping and IP Source Guard Are Working on the VLAN
Verify that DHCP snooping and IP source guard are enabled and working on the VLAN.
Chapter 94: Examples: Port Security Configuration
command to view the 802.1X details.
2887