Juniper JUNOS OS 10.3 - SOFTWARE Manual page 71

Part 16
Chapter 75
Chapter 76
Part 17
Chapter 81
Chapter 82
Chapter 83
Part 19
Chapter 93
Chapter 94
Copyright © 2010, Juniper Networks, Inc.
Figure 41: Basic VRRP on EX Series Switches . . . . . . . . . . . . . . . . . . . . . . . . . . . 1672
Figure 42: VRRP on Virtual Chassis Switches . . . . . . . . . . . . . . . . . . . . . . . . . . . 1673
IGMP Snooping and Multicast
Understanding IGMP Snooping and Multicast . . . . . . . . . . . . . . . . . . . . . . . 2315
Figure 43: IGMP Traffic Flow with IGMP Snooping Enabled . . . . . . . . . . . . . . . . 2316
Figure 44: IGMP Traffic Flow with Routed VLAN Interfaces . . . . . . . . . . . . . . . . 2318
Examples: IGMP Snooping and Multicast Configuration . . . . . . . . . . . . . 2323
Figure 45: MVR Topology in Transparent Mode . . . . . . . . . . . . . . . . . . . . . . . . . 2328
Figure 46: MVR Topology in Proxy Mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2329
Access Control
802.1X and MAC RADIUS Authentication Overview . . . . . . . . . . . . . . . . . 2523
Figure 47: Example Authentication Topology . . . . . . . . . . . . . . . . . . . . . . . . . . . 2527
Figure 48: Authentication Process Flow for an EX Series Switch . . . . . . . . . . . . 2534
Figure 49: VoIP Multiple Supplicant Topology . . . . . . . . . . . . . . . . . . . . . . . . . . 2542
Figure 50: VoIP Single Supplicant Topology . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2543
Examples: Access Control Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . 2545
Figure 51: Topology for Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2547
Figure 52: Topology for Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2551
Figure 53: Topology for Guest VLAN Example . . . . . . . . . . . . . . . . . . . . . . . . . . 2556
Figure 54: Topology for Static MAC Authentication Configuration . . . . . . . . . . . 2561
Figure 55: Topology for MAC RADIUS Authentication Configuration . . . . . . . . . 2565
Figure 56: Topology for Configuring Supplicant Modes . . . . . . . . . . . . . . . . . . . 2570
Figure 57: Topology for Firewall Filter and RADIUS Server Attributes
Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2576
Figure 58: VoIP Topology . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2583
Figure 59: Conceptual Model: Dynamic Filter Updated for Each New User . . . 2599
Figure 60: Multiple Supplicants on an 802.1X-Enabled Interface Connecting to
a File Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2600
Configuring Access Control . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2607
Figure 61: Example of a Captive Portal Login Page . . . . . . . . . . . . . . . . . . . . . . 2630
Port Security
Port Security Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2825
Figure 62: DHCP Server Connected Directly to Switch . . . . . . . . . . . . . . . . . . . . 2832
Figure 63: DHCP Server Connected Directly to Switch 2, with Switch 2 Connected
to Switch 1 Through a Trusted Trunk Port . . . . . . . . . . . . . . . . . . . . . . . . . . 2832
Figure 64: Switch Is the DHCP Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2833
Figure 65: Switch Acting as Relay Agent Through Router to DHCP Server . . . . 2834
Figure 66: DHCP Clients, Switch, and DHCP Server Are All on Same VLAN . . . 2842
Figure 67: Switch Relays DHCP Requests to Server . . . . . . . . . . . . . . . . . . . . . . 2843
Examples: Port Security Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2849
Figure 68: Network Topology for Basic Port Security . . . . . . . . . . . . . . . . . . . . . 2851
List of Figures
lxxi