Configure 802.1 x authentication on all host-facing access interfaces. To authenticate those devices that do not support an 802.1x supplicant, Static MAC Bypass or MAC RADIUS must be configured. The authentication order must be appropriate for the target environment. Configure RADIUS if available: user@host> configure user@host# set access radius-server secret "" user@host# set access profile dot1x_radius authentication-order radius user@host# set access profile dot1x_radius radius authentication-server -or- user@host# set access profile dot1x_radius radius-server secret "" To configure 802.1x on an access interface using the default authentication order: user@host# set protocols dot1x authenticator authentication-profile-name dot1x_radius user@host# set protocols dot1x authenticator interface supplicant single-secure To configure 802.1x and MAC RADIUS on an access interface and prefer MAC RADIUS in the authentication order: user@host# set protocols dot1x authenticator interface authentication-order mac-radius user@host# set protocols dot1x authenticator interface authentication-order dot1x user@host# set protocols dot1x authenticator interface authentication-order captive-portal user@host# set protocols dot1x authenticator interface supplicant multiple user@host# set protocols dot1x authenticator interface mac-radius To configure only MAC RADIUS on an access interface for devices that do not support 802.1x (authentication order cannot be set): user@host# set protocols dot1x authenticator interface mac-radius restrict To configure Static MAC Bypass: user@host# set protocols dot1x authenticator static /48 vlan-assignment user@host# set protocols dot1x authenticator static /48 interface .

Detections

Analytics

Item Search