Juniper JUNOS OS 10.3 - SOFTWARE, Manual

Page: 2710 / 3946

•
Configured basic access between the EX Series switch and the RADIUS server. See
“Example: Connecting a RADIUS Server for 802.1X to an EX Series Switch” on page 2545.
To configure MAC RADIUS authentication using the CLI:
• On the switch, configure the interfaces to which the nonresponsive hosts are attached
for MAC RADIUS authentication, and add the
restrict qualifier for interface ge-0/0/20
to have it use only MAC RADIUS authentication:
[edit]
user@switch#
set protocols dot1x authenticator interface ge-0/0/19 mac-radius
user@switch# set protocols dot1x authenticator interface ge-0/0/20 mac-radius
restrict
• On a RADIUS authentication server, create user profiles for each nonresponsive host
using the MAC address (without colons) of the nonresponsive host as the username
and password (here, the MAC addresses are
00:04:0f:fd:ac:fe
and
00:04:ae:cd:23:5f
):
[root@freeradius]#
edit /etc/raddb
vi users
00040ffdacfe Auth-type:=Local, User-Password = "00040ffdacfe"
0004aecd235f Auth-type:=Local, User-Password = "0004aecd235f"
Related
Documentation
Example: Configuring MAC RADIUS Authentication on an EX Series Switch on page 2564
•
•
Verifying 802.1X Authentication on page 2634
•
Understanding Authentication on EX Series Switches on page 2526
Copyright © 2010, Juniper Networks, Inc. 2614
Complete Software Guide for Junos
®
OS for EX Series Ethernet Switches, Release 10.3