dot1x
Syntax
- dot1x {
-
- authenticator {
-
- authentication-profile-name access-profile-name;
-
- interface (all
| [ interface-names ]) {
- disable;
- guest-vlan (vlan-id | vlan-name);
- mac-radius <restrict>;
- maximum-requests number;
- no-reauthentication;
- quiet-period seconds;
-
- reauthentication {
- interval seconds;
- }
- retries number;
- server-fail (deny
| permit | use-cache | vlan-id | vlan-name);
- server-reject-vlan (vlan-id | vlan-name);
- server-timeout seconds;
- supplicant (single
| single-secure | multiple);
- supplicant-timeout seconds;
- transmit-period seconds;
- }
-
- static mac-address {
-
- interface interface-names;
- vlan-assignment (vlan-id |vlan-name);
- }
-
- }
- }
Hierarchy Level
Release Information
Statement introduced in JUNOS Release 9.0 for EX Series switches.
Description
Configure 802.1X authentication for Port-Based Network Access Control. 802.1X authentication is supported on interfaces that are members of private VLANs (PVLANs).
The remaining statements are explained separately.
Default
802.1X is disabled.
Required Privilege Level
routing—To view this statement in the
configuration.
routing-control—To add this statement
to the configuration.