Juniper JUNOS OS 10.4 - FOR EX REV 1 Manual page 2938

Complete Software Guide for Junos
Related
Documentation
2834
®
OS for EX Series Ethernet Switches, Release 10.4
Configured basic access between the EX Series switch and the RADIUS server. See
"Example: Connecting a RADIUS Server for 802.1X to an EX Series Switch" on page 2765.
To configure MAC RADIUS authentication using the CLI:
On the switch, configure the interfaces to which the nonresponsive hosts are attached
for MAC RADIUS authentication, and add the
to have it use only MAC RADIUS authentication:
[edit]
user@switch# set protocols dot1x authenticator interface ge-0/0/19 mac-radius
user@switch# set protocols dot1x authenticator interface ge-0/0/20 mac-radius restrict
On a RADIUS authentication server, create user profiles for each nonresponsive host
using the MAC address (without colons) of the nonresponsive host as the username
and password (here, the MAC addresses are
[root@freeradius]#
edit /etc/raddb
vi users
00040ffdacfe Auth-type:=Local, User-Password = "00040ffdacfe"
0004aecd235f Auth-type:=Local, User-Password = "0004aecd235f"
Example: Configuring MAC RADIUS Authentication on an EX Series Switch on page 2784
Verifying 802.1X Authentication on page 2854
Understanding Authentication on EX Series Switches on page 2746
qualifier for interface
restrict
and
00:04:0f:fd:ac:fe 00:04:ae:cd:23:5f
Copyright © 2010, Juniper Networks, Inc.
ge-0/0/20
):