Juniper JUNOS OS 10.3 - SOFTWARE, Руководство пользователя

Страница: 2825 / 3946

static
Syntax static mac-address {
interface interface-names;
vlan-assignment (vlan-id |vlan-name );
}
Hierarchy Level
[edit protocols dot1x authenticator authentication-profile-name ]
Release Information Statement introduced in Junos OS Release 9.0 for EX Series switches.
Description Configure MAC addresses to exclude from 802.1X authentication. The static MAC list
provides an authentication bypass mechanism for supplicants connecting to a port,
permitting devices such as printers that are not 802.1X-enabled to be connected to the
network on 802.1X-enabled ports.
Using this 802.1X authentication-bypass mechanism, the supplicant connected to the
MAC address is assumed to be successfully authenticated and the port is opened for it.
No further authentication is done for the supplicant.
You can optionally configure the VLAN that the supplicant is moved to or the interfaces
on which the MAC address can gain access from.
Options
mac-address
—The MAC address of the device for which 802.1X authentication should
be bypassed and the device permitted access to the port.
The remaining statements are explained separately.
Required Privilege
Level
routing—To view this statement in the configuration.
routing-control—To add this statement to the configuration.
Related
Documentation
•
show dot1x static-mac-address on page 2764
•
Example: Configuring Static MAC Bypass of Authentication on an EX Series Switch on
page 2559
•
Configuring 802.1X Interface Settings (CLI Procedure) on page 2609
•
Configuring 802.1X Authentication (J-Web Procedure) on page 2610
•
Understanding Authentication on EX Series Switches on page 2526
2729 Copyright © 2010, Juniper Networks, Inc.
Chapter 85: Configuration Statements for Access Control