dot1x
语法
dot1x { authenticator { authentication-profile-name access-profile-name; interface (all | [ interface-names ]) { authentication-order (captive-portal | dot1x | mac-radius); disable; guest-bridge-domain guest-bridge-domain; guest-vlan guest-vlan; ignore-port-bounce; mac-radius { authentication-protocol { eap-md5; eap-peap { resume; } pap; } flap-on-disconnect; restrict; } maximum-requests number; multi-domain { max-data-session max-data-session; packet-action (drop-and-log | shutdown); recovery-timeout seconds; } (no-reauthentication | reauthentication interval ); no-tagged-mac-authentication; quiet-period seconds; redirect-url redirect-url; retain-mac-aged-session; retries number; server-fail (bridge-domain bridge-domain | deny | permit | use-cache | vlan-name vlan-name); server-fail-voip (deny | permit | use-cache | vlan-name vlan-name); server-reject-bridge-domain bridge-domain { block-interval seconds; eapol-block; } server-reject-vlan (vlan-id | vlan-name) { block-interval block-interval; eapol-block; } server-timeout seconds; supplicant (single | single-secure | multiple); supplicant-timeout seconds; transmit-period seconds; } ip-mac-session-binding; no-mac-table-binding; radius-options { add-interface-text-description; use-vlan-id; use-vlan-name; } static mac-address { bridge-domain-assignment bridge-domain-assignment; interface interface; vlan-assignment vlan-identifier; } } } ssl-certificate-path path-name; traceoptions { file filename <files files> <size size> <(world-readable | no-world-readable)>; flag (all | config-internal | dot1x-debug | dot1x-event | dot1x-ipc | eapol | esw-if | general | iccp | normal | parse | state | task | timer | vlan) { disable; } } }
层次结构级别
[edit logical-systems name protocols], [edit protocols]
描述
为基于端口的网络访问控制配置 IEEE 802.1X 身份验证。作为专用 VLAN (PVLAN) 成员的接口支持 802.1X 身份验证。
违约
802.1X 已禁用。
选项
ssl-certificate-path path-name | 如果未使用默认路径,请指定 SSL 证书的文件路径。SSL 证书的默认路径为 |
其余语句将单独解释。有关详细信息,请在 CLI 资源管理器 中搜索语句,或单击语法部分中的链接语句。
所需权限级别
路由 - 在配置中查看此语句。路由控制 - 将此语句添加到配置中。
发布信息
Junos OS 9.0 版中引入的语句。
ssl-certificate-path
在 Junos OS 19.4 版中引入。
ip-mac-session-binding
在 Junos OS 20.2 版中引入