Technical Documentation

Technical Documentation

Access Control on EX Series Switches

OverviewConfigurationAdministrationTroubleshooting
Configuration Examples

Example: Connecting a RADIUS Server for 802.1X to an EX Series Switch

Example: Setting Up 802.1X in Conference Rooms to Provide Internet Access to Corporate Visitors on an EX Series Switch

Example: Setting Up 802.1X for Single Supplicant or Multiple Supplicant Configurations on an EX Series Switch

Example: Setting Up VoIP with 802.1X and LLDP-MED on an EX Series Switch

Example: Configuring VoIP on an EX Series Switch Without Including LLDP-MED Support

Example: Configuring VoIP on an EX Series Switch Without Including 802.1X Authentication

Example: Configuring Static MAC Bypass of Authentication on an EX Series Switch

Example: Configuring 802.1X Authentication Options When the RADIUS Server is Unavailable to an EX Series Switch

Example: Configuring MAC RADIUS Authentication on an EX Series Switch

Example: Applying a Firewall Filter to 802.1X-Authenticated Supplicants Using RADIUS Server Attributes on an EX Series Switch

Example: Applying Firewall Filters to Multiple Supplicants on Interfaces Enabled for 802.1X or MAC RADIUS Authentication

Example: Setting Up Captive Portal Authentication on an EX Series Switch

Configuration Tasks

Configuring 802.1X Interface Settings (CLI Procedure)

Configuring 802.1X Authentication (J-Web Procedure)

Configuring 802.1X RADIUS Accounting (CLI Procedure)

Filtering 802.1X Supplicants Using RADIUS Server Attributes

Configuring LLDP (CLI Procedure)

Configuring LLDP (J-Web Procedure)

Configuring LLDP-MED (CLI Procedure)

VSA Match Conditions and Actions for EX Series Switches

Configuring Server Fail Fallback (CLI Procedure)

Configuring MAC RADIUS Authentication (CLI Procedure)

Configuring Static MAC Bypass of Authentication (CLI Procedure)

Specifying RADIUS Server Connections on an EX Series Switch (CLI Procedure)

Configuring Captive Portal Authentication (CLI Procedure)

Designing a Captive Portal Authentication Login Page on an EX Series Switch

Configuration Statements

[edit access] Configuration Statement Hierarchy

[edit ethernet-switching-options] Configuration Statement Hierarchy

[edit protocols] Configuration Statement Hierarchy

access

accounting (Access Profile)

accounting

accounting (EX Series switches only)

accounting-port

accounting-server

accounting-session-id-format

accounting-stop-on-access-deny

accounting-stop-on-access-deny (EX Series switches only)

accounting-stop-on-failure

accounting-stop-on-failure (EX Series switches only)

address

address-pool

address-range

advertisement-interval

attributes

authentication-order

authentication-order (EX Series switches only)

authentication-profile-name

authentication-server

authentication-whitelist

authenticator

ca-type

ca-value

captive-portal

civic-based

country-code

custom-options

destination

disable (for 802.1X)

disable (for LLDP)

disable (for LLDP-MED)

dot1x

elin

ethernet-port-type-virtual

ethernet-switching-options

events

exclude

fast-start

forwarding-class

guest-vlan

hold-multiplier

ignore

immediate-update

interface (for authentication)

interface (Captive Portal)

interface (for LLDP)

interface (for LLDP-MED)

interface (for static)

interface (for VoIP)

interface-description-format

lldp

lldp-med

location

mac-radius

maximum-requests

nas-identifier

nas-port-extended-format

no-reauthentication

options

order

order (EX Series switches only)

port

port (RADIUS Server)

port (TACACS+ Server)

profile

quiet-period

quiet-period (Captive Portal)

radius (Access Profile)

radius

radius (EX Series switches only)

radius-server

reauthentication

retries

retries (Captive Portal)

retry

retry

revert-interval

routing-instance

secret

secret

secure-authentication

server (RADIUS Accounting)

server (TACACS+ Accounting)

server-fail

server-reject-vlan

server-timeout

server-timeout (Captive Portal)

session-expiry

single-connection

source-address

source-address (NTP, RADIUS, System Logging, or TACACS+)

static

statistics

supplicant

supplicant-timeout

tacplus

timeout

timeout (RADIUS)

traceoptions (for 802.1X)

traceoptions (for LLDP)

transmit-period

update-interval

vlan-assignment

vlan-nas-port-stacked-format

voip

what