This article describes how to configure PEAP for MAC RADIUS authentication on a Junos device.

Prerequisites

• 802.1X authenticator configuration is already in place
• MAC RADIUS authentication is enabled on the interface
• Valid SSL certificate available on the device or accessible path

Configuration Steps:

STEP 1: Enable PEAP Authentication Protocol

COMMAND: root@ex2300# set protocols dot1x authenticator interface interface-name mac-radius authentication-protocol eap-peap

STEP 2 : Load the server-side SSL certificate using either the filename or path

root@ex2300> file list /var/tmp/certificate/

/var/tmp/certificate/:

32ea2a51.0@ -> ca.pem

ca.pem

root@jtac-ex2300-c-12p-r2002# set protocols dot1x ssl-certificate-path /var/tmp/certificate/

root@jtac-ex2300-c-12p-r2002# run load ssl-certificate path /var/tmp/certificate/

root@jtac-ex2300-c-12p-r2002# commit check

configuration check succeeds

Tou can verify this by using the command:

root@jtac-ex2300-c-12p-r2002> show ssl-certificates