Juniper JUNOS OS 10.3 - SOFTWARE, Manual

Page: 2648 / 3946

Table 333: Components of the Topology (continued)
Settings Property
Supplicant attempting access on interface
ge-0/0/1
Supplicant
Backend database with an address of 10.0.0.100 connected to the switch at port
ge-0/0/10
One RADIUS server
In this example, configure interface
ge-0/0/1
to move a supplicant attempting access
to the LAN during a RADIUS timeout to another VLAN. A RADIUS timeout prevents the
normal exchange of EAP messages that carry information from the RADIUS server to the
switch and permit the authentication of a supplicant. The
default VLAN is configured on
interface ge-0/0/1 . When a RADIUS timeout occurs, supplicants on the interface will be
moved from the default VLAN to the VLAN named vlan-sf .
NOTE: For more information about authentication, authorization, and
accounting (AAA) services, see the Junos OS System Basics Configuration
Guide at http://www.juniper.net/techpubs/software/junos/index.html.
Configuration
To configure server fail fallback on the switch:
CLI Quick
Configuration
To quickly configure server fail fallback on the switch, copy the following commands and
paste them into the switch terminal window:
[edit protocols dot1x authenticator]
set interface ge-0/0/1 server-fail vlan-name vlan-sf
Step-by-Step
Procedure
To configure an interface to divert supplicants to a specific VLAN when a RADIUS timeout
occurs (here, the VLAN is
vlan-sf ):
1.
Define the VLAN to which supplicants are diverted:
[edit protocols dot1x authenticator]
user@switch#
set interface server-fail vlan-name vlan-sf
Results Display the results of the configuration:
user@switch> show configuration
interfaces {
ge-0/0/1 {
unit 0 {
family ethernet-switching {
vlan {
members default;
}
}
}
}
protocols {
dot1x {
Copyright © 2010, Juniper Networks, Inc. 2552
Complete Software Guide for Junos
®
OS for EX Series Ethernet Switches, Release 10.3