Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

Navigation

[edit access] Configuration Statement Hierarchy on EX Series Switches

This topic lists supported and unsupported configuration statements in the [edit access] hierarchy level on EX Series switches.

  • Supported statements are those that you can use to configure some aspect of a software feature on the switch.
  • Unsupported statements are those that appear in the command-line interface (CLI) on the switch, but that have no effect on switch operation if you configure them.
  • Not all features are supported on all switch platforms. For detailed information about feature support on specific EX Series switch platforms, see EX Series Switch Software Features Overview.

This topic lists:

Supported Statements in the [edit access] Hierarchy Level

The following hierarchy shows the [edit access] configuration statements supported on EX Series switches:

access {address-assignment {abated-utilization percentage;abated-utilization-v6 percentage;high-utilization percentage;high-utilization-v6 percentage;pool pool-name {family inet {dhcp-attributes {boot-file filename;boot-server hostname;domain-name domain-name;grace-period seconds;maximum-lease-time (seconds | infinite);name-server {address;}netbios-node-type (b-node | h-node | m-node | p-node);option option-index (array (byte | flag | integer | ip-address | short | string | unsigned-integer | unsigned-short) [ type-values ] | byte 8-bit-value | flag (false | off | on | true) | integer signed-32-bit-value | ip-address address | short signed-16-bit-value | string text-string | unsigned-integer 32-bit-value | unsigned-short 16-bit-value);router {address;}server-identifier ipv4-address;tftp-server hostname;wins-server {address;}}host hostname {hardware-address mac-address;ip-address ip-address;}network ip-prefix</prefix-length>;range name {high upper-limit;low lower-limit;}}link pool-name;}}address-pool pool-name {address address-or-prefix;address-range <low lower-limit> <high upper-limit>;}profile profile-name {accounting {accounting-stop-on-access-deny;accounting-stop-on-failure;coa-immediate-update;immediate-update;order (radius | none);statistics (time | volume-time);}}authentication-order (ldap | password | radius);client client-name {chap-secret chap-secret;firewall-user {password password;}no-rfc2486;pap-password password;}radius {accounting-server server-address;attributes {exclude [exclude-options];ignore [ignore-options];}authentication-server server-address;}radius-options (Access) {revert-interval (Access RADIUS) interval;}session-options {client-group [group-names];client-idle-timeout minutes;client-session-timeout minutes;}radius-options (Access) {revert-interval (Access RADIUS) interval;}radius-serverserver-address {port port-number;retry attempts;routing-instance instance-name;secret password;source-address address;timeout minutes;}}

Unsupported Statements in the [edit access] Hierarchy Level

All statements in the [edit access] hierarchy level that are displayed in the command-line interface (CLI) on the switch are supported on the switch and operate as documented with the following exceptions:

Table 1: Unsupported [edit access] Configuration Statements on EX Series Switches

Statement

Hierarchy Level

Note: Variables, such as filename, are not shown in the statements or hierarchies.

aaa

[edit access terminate-code]

administrative-reset

[edit access terminate-code aaa shutdown]

authentication-denied

[edit access terminate-code aaa deny]

client-request

[edit access terminate-code aaa dhcp]

compliance

[edit access ppp-options]

deny

[edit access terminate-code aaa]

dhcp

[edit access terminate-code]

group-profile

[edit access]

ike

[edit access profile client]

initiate-dead-peer-detection

[edit access profile client ike]

lost-carrier

[edit access terminate-code dhcp]

nak

[edit access terminate-code dhcp]

nas-logout

[edit access terminate-code dhcp]

no-offers

[edit access terminate-code dhcp]

no-resources

[edit access terminate-code aaa deny]

ppp-options

[edit access]

preference

[edit access profile client ike reverse-route]

remote-reset

[edit access terminate-code aaa shutdown]

rfc

[edit access ppp-options compliance]

reverse-route

[edit access profile client ike]

server-request-timeout

[edit access terminate-code aaa deny]

shutdown

[edit access terminate-code aaa]

terminate-code

[edit access]

Published: 2012-12-11