Juniper JUNOS OS 10.4 - FOR EX REV 1 Manual page 2876

Complete Software Guide for Junos
Configuration
CLI Quick
Configuration
Step-by-Step
Procedure
Results
2772
®
OS for EX Series Ethernet Switches, Release 10.4
normal exchange of EAP messages that carry information from the RADIUS server to the
switch and permit the authentication of a supplicant. The
interface . When a RADIUS timeout occurs, supplicants on the interface will be
ge-0/0/1
moved from the default VLAN to the VLAN named
NOTE: For more information about authentication, authorization, and
accounting (AAA) services, see the
To configure server fail fallback on the switch:
To quickly configure server fail fallback on the switch, copy the following commands and
paste them into the switch terminal window:
[edit protocols dot1x authenticator]
set interface ge-0/0/1 server-fail vlan-name vlan-sf
To configure an interface to divert supplicants to a specific VLAN when a RADIUS timeout
occurs (here, the VLAN is vlan-sf
Define the VLAN to which supplicants are diverted:
1.
[edit protocols dot1x authenticator]
user@switch# set interface server-fail vlan-name vlan-sf
Display the results of the configuration:
user@switch> show configuration
interfaces {
ge-0/0/1 {
unit 0 {
family ethernet-switching {
vlan {
members default;
}
}
}
}
protocols {
dot1x {
authenticator {
authentication-profile-name profile52;
interface {
ge-0/0/1.0 {
server-fail vlan-name vlan-sf;
}
}
}
}
}
}
default
vlan-sf .
Junos OS System Basics Configuration Guide
):
Copyright © 2010, Juniper Networks, Inc.
VLAN is configured on
.