- Download PDFs
- dot1x
- Related Topics
- show dot1x
- Example: Setting Up 802.1X for Single Supplicant or Multiple Supplicant Configurations on an EX-series Switch
- Example: Setting Up 802.1X in Conference Rooms to Provide Internet Access to Corporate Visitors on an EX-series Switch
- Example: Setting Up VoIP with 802.1X and LLDP-MED on an EX-series Switch
- Example: Setting Up 802.1X for Nonresponsive Hosts on an EX-series Switch
- Example: Setting Up 802.1X for Nonresponsive Hosts on an EX-series Switch and a RADIUS Server
- Example: Applying Firewall Filters to Multiple Supplicants on Interfaces Enabled for 802.1X or MAC RADIUS Authentication
- Configuring MAC RADIUS Authentication (CLI Procedure)
- Configuring Server Fail Fallback (CLI Procedure)
dot1x
Syntax
- dot1x {
-
- authenticator {
-
- authentication-profile-name access-profile-name;
-
- interface (all
| [ interface-names ]) {
- disable;
- guest-vlan ( vlan-id | vlan-name);
- mac-radius <restrict>;
- maximum-requests number;
- no-reauthentication;
- quiet-period
seconds;
-
- reauthentication {
- interval seconds;
- }
- retries
number;
- server-fail (deny
| permit | use-cache | vlan-id | vlan-name);
- server-reject-vlan (vlan-id | vlan-name);
- server-timeout
seconds;
- supplicant (single
| single-secure | multiple);
- supplicant-timeout seconds;
- transmit-period seconds;
- }
-
- static mac-address{
-
- interface
interface-names;
- vlan-assignment (vlan-id |vlan-name);
- }
-
- }
- }
Hierarchy Level
Release Information
Statement introduced in JUNOS Release 9.0 for EX-series switches.
Description
Configure 802.1X authentication for Port-Based Network Access Control.
The remaining statements are explained separately.
Default
802.1X is disabled.
Required Privilege Level
routing—To view this statement in the
configuration.
routing-control—To add this statement
to the configuration.