Juniper JUNOS OS 10.4 - FOR EX REV 1 Manual page 2959

Chapter 90: Verifying 802.1X and MAC RADIUS Authentication
—When the RADIUS server is unavailable, a supplicant is still permitted
Server-fail permit
access to the LAN as if the supplicant had been successfully authenticated by the
RADIUS server.
Server-fail use-cache —If the RADIUS servers time out during reauthentication, previously
authenticated supplicants are granted access, but new supplicants are denied LAN
access.
—A supplicant is configured to be moved to a specified VLAN if the
Server-fail VLAN
RADIUS server is unavailable to reauthenticate the supplicant. (The VLAN must already
exist on the switch.)
Related Configuring 802.1X Interface Settings (CLI Procedure) on page 2829
Documentation
Configuring 802.1X Authentication (J-Web Procedure) on page 2830
Configuring MAC RADIUS Authentication (CLI Procedure) on page 2833
Configuring Server Fail Fallback (CLI Procedure) on page 2835
Copyright © 2010, Juniper Networks, Inc. 2855