Juniper JUNOS OS 10.4 - FOR EX REV 1 Manual page 48

Complete Software Guide for Junos
Part 18
Chapter 87
Chapter 88
xlviii
®
OS for EX Series Ethernet Switches, Release 10.4
Access Control
802.1X and MAC RADIUS Authentication Overview . . . . . . . . . . . . . . . . . 2745
Understanding Authentication on EX Series Switches . . . . . . . . . . . . . . . . . . . . 2746
A Basic Authentication Topology . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2746
802.1X Authentication . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2748
MAC RADIUS Authentication . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2748
Captive Portal Authentication . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2749
Static MAC Bypass of Authentication . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2750
Fallback of Authentication Methods . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2750
802.1X for EX Series Switches Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2751
How 802.1X Authentication Works . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2751
802.1X Features Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2752
Supported Features Related to 802.1X Authentication . . . . . . . . . . . . . . . . 2752
Authentication Process Flow for EX Series Switches . . . . . . . . . . . . . . . . . . . . . 2753
Understanding Server Fail Fallback and Authentication on EX Series
Switches . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2756
Understanding Dynamic VLANs for 802.1X on EX Series Switches . . . . . . . . . . 2757
Understanding Guest VLANs for 802.1X on EX Series Switches . . . . . . . . . . . . . 2757
Understanding 802.1X and RADIUS Accounting on EX Series Switches . . . . . . 2758
Understanding 802.1X and LLDP and LLDP-MED on EX Series Switches . . . . . 2759
Understanding 802.1X and VoIP on EX Series Switches . . . . . . . . . . . . . . . . . . . 2761
Understanding 802.1X and VSAs on EX Series Switches . . . . . . . . . . . . . . . . . . 2764
Examples: Access Control Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . 2765
Example: Connecting a RADIUS Server for 802.1X to an EX Series Switch . . . . 2765
Example: Configuring 802.1X Authentication Options When the RADIUS Server
is Unavailable to an EX Series Switch . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2769
Example: Setting Up 802.1X in Conference Rooms to Provide Internet Access
to Corporate Visitors on an EX Series Switch . . . . . . . . . . . . . . . . . . . . . . . . 2774
Example: Configuring Static MAC Bypass of Authentication on an EX Series
Switch . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2779
Example: Configuring MAC RADIUS Authentication on an EX Series Switch . . 2784
Example: Setting Up 802.1X for Single Supplicant or Multiple Supplicant
Configurations on an EX Series Switch . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2788
Example: Applying a Firewall Filter to 802.1X-Authenticated Supplicants Using
RADIUS Server Attributes on an EX Series Switch . . . . . . . . . . . . . . . . . . . 2794
Example: Setting Up VoIP with 802.1X and LLDP-MED on an EX Series
Switch . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2800
Example: Configuring VoIP on an EX Series Switch Without Including 802.1X
Authentication . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2807
Example: Configuring VoIP on an EX Series Switch Without Including LLDP-MED
Support . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2813
Example: Applying Firewall Filters to Multiple Supplicants on Interfaces Enabled
for 802.1X or MAC RADIUS Authentication . . . . . . . . . . . . . . . . . . . . . . . . . 2816
Example: Setting Up Captive Portal Authentication on an EX Series Switch . . . 2821
Copyright © 2010, Juniper Networks, Inc.