unified-access-policy (Protocols)

Syntax

Hierarchy Level

Description

Configure unified access policy. Unified access policy extends Group-Based Policy (GBP) support to Mist access points (APs). This allows wireless clients to participate in GBP microsegmentation alongside wired clients in a network.

Options

interface

Name of the interface to enable for unified access policy. The named interface receives and transmits GBP messages from and to Mist APs.

interface inter-switch link

Configures the specified interface to be a unified access policy inter-switch link. The named interface receives and transmits GBP messages from and to other switches that are enabled for unified access policy.

key	Secret key to sign GBP messages.

mac

Multicast MAC address for GBP messages. When the switch receives an Ethernet multicast frame that matches this multicast MAC address, the switch passes the frame up the stack for GBP message parsing and processing, You typically don't need to configure this address. The supplied default works under most situations.

robust-count

Number of times that the switch sends out the same GBP lookup message before giving up. This is the total number of times and includes the initial sending and any subsequent resending due to lack of response.

source-mac

Source MAC address for GBP lookup messages. When the switch wants to discover the GBP tag associated with the received Ethernet frame, the switch sends a GBP lookup message with the configured MAC address as the source MAC address. Configure this only in a multi-homing scenario.

Note: Adding or removing interfaces (in the interface or interface inter-switch link options) will flush all MAC address entries from the MAC address table for the specified interfaces.

Required Privilege Level

routing—To view this statement in the configuration.

routing-control—To add this statement to the configuration.

Release Information

Statement introduced in Junos OS Release 25.4R1.

ON THIS PAGE