Dell PowerConnect J-EX8208, Software Manual

Page: 2332 / 3660

contains optional VLAN information, then the user is moved to the VLAN specified by
the RADIUS server and not to the locally configured guest-VLAN.
Authentication can fail for many reasons:
•
The host device does not have supplicant software on it (for example, the host is not
802.1X-enabled, such as a printer).
• The supplicant provided invalid credentials—a username or password that were not
authenticated by the authentication server.
For hosts that are not 802.1X-enabled, the guest VLAN could allow limited access to a
server from which the non-802.1X-enabled host can download the supplicant software
and attempt authentication again.
Related
Documentation
Example: Setting Up 802.1X in Conference Rooms to Provide Internet Access to
Corporate Visitors on a J-EX Series Switch on page 2276
•
•
Understanding Dynamic VLANs for 802.1X on J-EX Series Switches on page 2259
Understanding 802.1X and RADIUS Accounting on J-EX Series Switches
J-EX Series Switches support IETF RFC 2866, RADIUS Accounting . Configuring RADIUS
accounting on a J-EX Series switch permits statistical data about users logging onto or
off a LAN to be collected and sent to a RADIUS accounting server. The statistical data
gathered can be used for general network monitoring, to analyze and track usage patterns,
or to bill a user based upon the amount of time or type of services accessed.
To configure RADIUS accounting, specify one or more RADIUS accounting servers to
receive the statistical data from the switch, and select the type of accounting data to be
collected.
The RADIUS accounting server you specify can be the same server used for RADIUS
authentication, or it can be a separate RADIUS server. You can specify a list of RADIUS
accounting servers. In the event that the primary server (the first one configured) is
unavailable, each RADIUS server in the list is tried in the order in which they are configured
in the Junos OS.
The RADIUS accounting process between a switch and a RADIUS server works like this:
1.
A RADIUS accounting server listens for User Datagram Protocol (UDP) packets on a
specific port. For example, on FreeRADIUS, the default port is 1813.
2.
The switch forwards an accounting-request packet containing an event record to the
accounting server. For example, a supplicant is authenticated through 802.1X
authentication and connected to the LAN. The event record associated with this
supplicant contains an Acct-Status-Type attribute whose value indicates the beginning
of user service for this supplicant. When the supplicant's session ends, the accounting
request will contain an Acct-Status-Type attribute value indicating the end of user
service. The RADIUS accounting server records this as a stop-accounting record
containing session information and the length of the session.
2260
Dell PowerConnect J-Series Ethernet Switch Complete Software Guide for Junos OS