- Download PDFs
- dot1x
- Related Topics
- show dot1x
- clear dot1x
- Example: Setting Up 802.1X for Single Supplicant or Multiple Supplicant Configurations on an EX-series Switch
- Example: Setting Up 802.1X in Conference Rooms to Provide Internet Access to Corporate Visitors on an EX-series Switch
- Example: Setting Up VoIP with 802.1X and LLDP-MED on an EX-series Switch
- Example: Setting Up 802.1X for Nonresponsive Hosts on an EX-series Switch
- Example: Setting Up 802.1X for Nonresponsive Hosts on an EX-series Switch and a RADIUS Server
- Configuring MAC RADIUS Authentication (CLI Procedure)
- Configuring Server Fail Fallback (CLI Procedure)
dot1x
Syntax
- dot1x {
-
- authenticator {
-
- authentication-profile-name
access-profile-name;
-
- static {
-
- mac-address {
-
- vlan-assignment (vlan-id |vlan-name );
- interface
interface-names;
- }
- }
-
- interface (all | [ interface-names ]) {
- disable;
- guest-vlan (vlan-name | vlan-id);
- mac-radius <restrict>;
- maximum-requests number;
- no-reauthentication;
- quiet-period seconds;
-
- reauthentication {
- interval seconds;
- }
- retries number;
- server-fail (deny
| permit | use-cache | vlan-id | vlan-name);
- server-reject-vlan (vlan-id | vlan-name);
- server-timeout seconds;
- supplicant (single | single-secure | multiple);
- supplicant-timeout seconds;
- transmit-period seconds;
- }
- }
Hierarchy Level
Release Information
Statement introduced in JUNOS Release 9.0 for EX-series switches.
Description
Configure 802.1X authentication for Port-Based Network Access Control.
 |
Note: You cannot enable 802.1X authentication on interfaces that are members of private VLANs (PVLANs). |
The remaining statements are explained separately.
Default
802.1X is disabled.
Required Privilege Level
routing—To view this statement in the
configuration.
routing-control—To add this statement
to the configuration.