Juniper JUNOS OS 10.4 - FOR EX REV 1 Manual page 2940

Complete Software Guide for Junos
Related
Documentation
2836
®
OS for EX Series Ethernet Switches, Release 10.4
To configure basic server fail fallback options using the CLI:
Configure an interface to allow traffic to flow from a supplicant to the LAN if a RADIUS
server timeout occurs (as if the end device had been successfully authenticated by a
RADIUS server):
[edit protocols dot1x authenticator]
user@switch# set interface ge-0/0/1 server-fail permit
Configure an interface to prevent traffic flow from an end device to the LAN (as if the
end device had failed authentication and had been rejected by the RADIUS server):
[edit protocols dot1x authenticator]
user@switch# set interface ge-0/0/1 server-fail deny
Configure an interface to move an end device to a specified VLAN if a RADIUS server
timeout occurs (in this case, the VLAN name is
[edit protocols dot1x authenticator]
user@switch# set interface ge-0/0/1 server-fail vlan-name vlan1
Configure an interface to recognize already connected end devices as reauthenticated
if there is a RADIUS timeout during reauthentication (new users will be denied access):
[edit protocols dot1x authenticator]
user@switch# set interface ge-0/0/1 server-fail use-cache
Configure an interface that receives an EAPOL access-reject message from the
authentication server to move end devices attempting LAN access on the interface to
a specified VLAN already configured on the switch (in this case, the VLAN name is
):
vlan-sf
[edit protocols dot1x authenticator]
user@switch# set interface ge-0/0/1 server-reject-vlan vlan-sf
Example: Configuring 802.1X Authentication Options When the RADIUS Server is
Unavailable to an EX Series Switch on page 2769
Configuring 802.1X Authentication (J-Web Procedure) on page 2830
Configuring 802.1X Interface Settings (CLI Procedure) on page 2829
Monitoring 802.1X Authentication on page 2853
Understanding Server Fail Fallback and Authentication on EX Series Switches on
page 2756
):
vlan1
Copyright © 2010, Juniper Networks, Inc.