TechLibrary

Table of Contents

Guide That Contains This Content

[+] Expand All

[-] Collapse All

dot1x

Syntax

dot1x { authenticator {authentication-profile-name access-profile-name; interface (802.1X) (all | [ interface-names ]) {disable (802.1X);guest-vlan (vlan-id | vlan-name);lldp-med-bypass;mac-radius <restrict>;maximum-requests number;no-reauthentication;quiet-period seconds; reauthentication {interval seconds;}retries number;server-fail (deny | permit | use-cache | vlan-id | vlan-name);server-reject-vlan (vlan-id | vlan-name) { eapol-block; block-interval block-interval;}server-timeout seconds;supplicant (single | single-secure | multiple);supplicant-timeout seconds; transmit-period seconds;}no-mac-table-binding {interface interface-namesstatic (Protocols 802.1X) mac-address }static (Protocols 802.1X) mac-address {interface (Static MAC Bypass) interface-names;vlan-assignment (vlan-id |vlan-name);}}}

Hierarchy Level

[edit protocols]

Release Information

Statement introduced in Junos OS Release 9.0 for EX Series switches.

Description

Configure 802.1X authentication for Port-Based Network Access Control. 802.1X authentication is supported on interfaces that are members of private VLANs (PVLANs).

The remaining statements are explained separately.

Default

802.1X is disabled.

Required Privilege Level

routing—To view this statement in the configuration.
routing-control—To add this statement to the configuration.