Configurations On An Ex Series Switch - Juniper JUNOS OS 10.4 - FOR EX REV 1 Manual

Meaning
Related
Documentation
Example: Configuring Static MAC Bypass of Authentication on an EX Series Switch
Requirements
Copyright © 2010, Juniper Networks, Inc.
Session Reauth interval: 60 seconds
Reauthentication due in 50 seconds
The output from the
show vlans
VLAN and the VLAN ID as
The output from the show dot1x interface ge-0/0/1.0 detail
field, indicating that a supplicant at this interface failed 802.1X
VLAN membership
authentication and was passed through to the
Example: Connecting a RADIUS Server for 802.1X to an EX Series Switch on page 2765
Example: Setting Up 802.1X for Single Supplicant or Multiple Supplicant Configurations
on an EX Series Switch on page 2788
Example: Setting Up VoIP with 802.1X and LLDP-MED on an EX Series Switch on
page 2800
Configuring 802.1X Interface Settings (CLI Procedure) on page 2829
To allow devices to access your LAN through 802.1X-configured interfaces without
authentication, you can configure a static MAC bypass list on the EX Series switch. The
static MAC bypass list, also known as the exclusion list, specifies MAC addresses that
are allowed on the switch without a request to an authentication server.
You can use static MAC bypass of authentication to allow connection for devices that
are not 802.1X-enabled, such as printers. If a host's MAC address is compared and
matched against the static MAC address list, the nonresponsive host is authenticated
and an interface opened for it.
This example describes how to configure static MAC bypass of authentication for two
printers:
Requirements on page 2779
Overview and Topology on page 2780
Configuration on page 2782
Verification on page 2783
This example uses the following hardware and software components:
Junos OS Release 9.0 or later for EX Series switches
One EX Series switch acting as an authenticator port access entity (PAE). The ports
on the authenticator PAE form a control gate that blocks all traffic to and from
supplicants until they are authenticated.
Before you configure static MAC authentication, be sure you have:
Chapter 88: Examples: Access Control Configuration
command shows
guest-vlan
.
300
guest-vlan
as the the name of the
command displays the Guest
.
2779