Juniper JUNOS OS 10.3 - SOFTWARE, Manual

Page: 2653 / 3946

Table 334: Components of the Guest VLAN Topology
Settings Property
EX4200 switch, 24 Gigabit Ethernet interfaces: 8 PoE interfaces (
ge-0/0/0
through
ge-0/0/7 ) and 16 non-PoE interfaces ( ge-0/0/8 through ge-0/0/23 )
Switch hardware
sales
, tag
100
support
, tag
200
guest-vlan
, tag
300
VLAN names and tag IDs
Backend database connected to the switch through interface
ge-0/0/10
One RADIUS server
In this example, access interface ge-0/0/1 provides LAN connectivity in the conference
room. Configure this access interface to provide LAN connectivity to visitors in the
conference room who are not authenticated by the corporate VLAN.
Configuration of a Guest VLAN That Includes 802.1X Authentication
To create a guest VLAN and configure 802.1X authentication, perform these tasks:
CLI Quick
Configuration
To quickly configure a guest VLAN, with 802.1X authentication, copy the following
commands and paste them into the switch terminal window:
[edit]
set vlans guest-vlan vlan-id 300
set protocols dot1x authenticator interface all guest-vlan guest-vlan
Step-by-Step
Procedure
To configure a guest VLAN that includes 802.1X authentication on an EX Series switch:
Configure the VLAN ID for the guest VLAN:
1.
[edit]
user@switch# set vlans guest-vlan vlan-id 300
2.
Configure the guest VLAN under
dot1x
protocols:
[edit]
user@switch# set protocols dot1x authenticator interface all guest-vlan guest-vlan
Results Check the results of the configuration:
user@switch> show configuration
protocols {
dot1x {
authenticator {
interface {
all {
guest-vlan {
guest-vlan;
}
}
}
}
}
2557 Copyright © 2010, Juniper Networks, Inc.
Chapter 82: Examples: Access Control Configuration