Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
 

Authentication and Access Control

  • 802.1Xauthentication with EVPN-VXLAN (EX4650, QFX5120)—Starting in Junos OS Release 22.4R1, the EX4650, QFX5120-32C, QFX5120-48T, QFX5120-48Y, and QFX5120-48YM switches that act as access switches can use 802.1X authentication to protect an EVPN-VXLAN network from unauthorized end devices.

    These switches support the following 802.1X authentication features on access and trunk ports:

    • Access ports: single, single-secure, and multiple supplicant modes

    • Trunk ports: single and single-secure supplicant modes

    • Guest VLAN

    • Server fail

    • Server reject

    • Dynamic VLAN

    • Dynamic firewall filters

    • RADIUS accounting

    • Port bounce with Change of Authorization (CoA) requests

    • MAC RADIUS client authentication

    • Central Web Authentication (CWA) with redirect URL

    • Captive portal client authentication

    • Flexible authentication with fallback scenarios

    [See 802.1X Authentication