Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

Announcement: Try the Ask AI chatbot for answers to your technical questions about Juniper products and solutions.

close
header-navigation
keyboard_arrow_up
close
keyboard_arrow_left
list Table of Contents
file_download PDF
{ "lLangCode": "en", "lName": "English", "lCountryCode": "us", "transcode": "en_US" }
English
keyboard_arrow_right

Configuring an Authentication Password for VLAN or Stacked VLAN Ranges

date_range 06-Dec-23

You can specify an authentication password for dynamically created VLAN or stacked VLAN interfaces at the [edit interfaces interface-name auto-configure vlan-ranges authentication] or [edit interfaces interface-name auto-configure stacked-vlan-ranges authentication] hierarchy level. This password is sent to the external AAA authentication server for subscriber authentication.

Note:

You must configure the username-include (Interfaces) statement to enable the use of authentication. The password (Interfaces) statement is not required and does not cause the interface to use authentication if the username-include (Interfaces) statement is not included.

To configure an authentication password:

  1. Access the interface over which you want to create dynamic VLANs.
    content_copy zoom_out_map
    user@host# edit interfaces ge-0/0/0
    
  2. Edit the VLAN auto-configure stanza.
    content_copy zoom_out_map
    [edit interfaces ge-0/0/0]
    user@host# edit auto-configure
    
  3. Edit the vlan-ranges or stacked-vlan-ranges stanza.
    content_copy zoom_out_map
    [edit interfaces ge-0/0/0 auto-configure]
    user@host# edit vlan-ranges
    

    or

    content_copy zoom_out_map
    [edit interfaces ge-0/0/0 auto-configure]
    user@host# edit stacked-vlan-ranges
    
  4. Edit the VLAN authentication stanza.
    content_copy zoom_out_map
    [edit interfaces ge-0/0/0 auto-configure vlan-ranges]
    user@host# edit authentication
    
  5. Specify a password that is sent to the external AAA authentication server for subscriber authentication.
    content_copy zoom_out_map
    [edit interfaces ge-0/0/0 auto-configure vlan-ranges]
    user@host# set password (Interfaces) $ABC123
    
footer-navigation