To Corporate Visitors On An Ex Series Switch - Juniper JUNOS OS 10.4 - FOR EX REV 1 Manual

Complete Software Guide for Junos
Meaning
Related
Documentation
Example: Setting Up 802.1X in Conference Rooms to Provide Internet Access to
Corporate Visitors on an EX Series Switch
Requirements
2774
®
OS for EX Series Ethernet Switches, Release 10.4
802.1X Information:
Interface Role
ge-0/0/1.0 Authenticator
ge-0/0/10.0 Authenticator
ge-0/0/14.0 Authenticator
ge-0/0/15.0 Authenticator
ge-0/0/20.0 Authenticator
The command
show vlans
VLAN. The command show dot1x interface brief
authenticated on interface
RADIUS server timeout occurs, and the authentication server cannot be reached by the
switch. The command
show-ethernet-switching table
00:00:00:00:00:01 is learned on VLAN
VLAN to the
default vlan-sf
the VLAN named .
vlan-sf
Example: Setting Up 802.1X for Single Supplicant or Multiple Supplicant Configurations
on an EX Series Switch on page 2788
Configuring Server Fail Fallback (CLI Procedure) on page 2835
Configuring 802.1X RADIUS Accounting (CLI Procedure) on page 2837
Filtering 802.1X Supplicants Using RADIUS Server Attributes on page 2838
Understanding Server Fail Fallback and Authentication on EX Series Switches on
page 2756
802.1X on EX Series switches provides LAN access to users who do not have credentials
in the RADIUS database. These users, referred to as guests, are authenticated and typically
provided with access to the Internet.
This example describes how to create a guest VLAN and configure 802.1X authentication
for it.
Requirements on page 2774
Overview and Topology on page 2775
Configuration of a Guest VLAN That Includes 802.1X Authentication on page 2777
Verification on page 2778
This example uses the following hardware and software components:
Junos OS Release 9.0 or later for EX Series switches
State MAC address
Connecting
Initialize
Connecting
Initialize
Initialize
displays interface
ge-0/0/1.0
shows that a supplicant (
and has the MAC address
ge-0/0/1.0
vlan-sf . The supplicant has been moved from the
VLAN. The supplicant is then connected to the LAN through
User
as a member of the
default
abc ) is
00:00:00:00:00:01
shows that MAC address
Copyright © 2010, Juniper Networks, Inc.
. A