Configuring 802.1X Authentication (J-Web Procedure) - Juniper JUNOS OS 10.4 - FOR EX REV 1 Manual

Complete Software Guide for Junos
Meaning
Related
Documentation
Example: Setting Up 802.1X for Single Supplicant or Multiple Supplicant Configurations
on an EX Series Switch
2788
®
OS for EX Series Ethernet Switches, Release 10.4
Session Reauth interval: 60 seconds
Reauthentication due in 50 seconds
user@switch> show dot1x interface ge-0/0/20.0 detail
ge-0/0/20.0
Role: Authenticator
Administrative state: Auto
Supplicant mode: Single
Number of retries: 3
Quiet period: 60 seconds
Transmit period: 30 seconds
Mac Radius: Enabled
Mac Radius Restrict: Enabled
Reauthentication: Enabled
Configured Reauthentication interval: 3600 seconds
Supplicant timeout: 30 seconds
Server timeout: 30 seconds
Maximum EAPOL requests: 2
Guest VLAN member: <not configured>
Number of connected supplicants: 1
Supplicant: user102, 00:04:ae:cd:23:5f
Operational state: Authenticated
Authentcation method: Radius
Authenticated VLAN: vo11
Dynamic Filter: match source-dot1q-tag 10 action deny
Session Reauth interval: 60 seconds
Reauthentication due in 50 seconds
The sample output from the
address of the connected end device in the
MAC address is
00:04:0f:fd:ac:fe
for MAC RADIUS authentication. The
authentication method as
, which is the MAC address of the second printer configured for MAC
00:04:ae:cd:23:5f
RADIUS authentication. The
method as .
MAC Radius
Configuring MAC RADIUS Authentication (CLI Procedure) on page 2833
Configuring 802.1X Interface Settings (CLI Procedure) on page 2829
Configuring 802.1X Authentication (J-Web Procedure) on page 2830
Understanding Authentication on EX Series Switches on page 2746
802.1x Port-Based Network Access Control (PNAC) authentication on EX Series switches
provides three types of authentication to meet the access needs of your enterprise LAN:
Authenticate the first end device (supplicant) on an authenticator port, and allow all
others also connecting to have access.
Authenticate only one end device on an authenticator port at one time.
show dot1x interface detail
Supplicant
, which is the MAC address of the first printer configured
Authentication method
. On interface
MAC Radius ge-0/0/20
Authentication method field displays the authentication
command displays the MAC
field. On interface ge-0/0/19
field displays the
, the MAC address is
Copyright © 2010, Juniper Networks, Inc.
, the