[Prev][Next][Report an Error]

Example: Configuring a Guest VLAN (CLI)

802.1X provides LAN access to users who do not have credentials in the RADIUS database. These users, referred to as guests, are authenticated and typically provided access only to the Internet.

This example describes how to create a guest VLAN and configure 802.1X authentication for it.

  1. Configure the VLAN ID for the guest VLAN:

    [edit]


    user@host# set vlans visitor-vlan vlan-id 300
  2. Configure the guest VLAN under dot1x protocols:

    [edit]


    user@host# set protocols dot1x authenticator interface all guest-vlan visitor-vlan
  3. Check the results of the configuration:
    user@host> show configuration
    protocols {
    dot1x {
    authenticator {
    interface {
    all {
    guest-vlan {
    visitor-vlan;
    }
    }
    }
    }
    }
    }
    vlans {
    visitor-vlan {
    vlan-id 300;
    }
    }
[Prev][Next][Report an Error]

Copyright © 2010, Juniper Networks, Inc. All rights reserved. Trademark Notice.