Description

Authentication of users connecting to a LAN via an EX switch can be performed via 802.1X, MAC RADIUS, or captive portal. Users accessing the EX switch for management purposes can be authenticated via RADIUS, TACACS+ and local password. 

However, authentication via LDAP is not supported.

Symptoms

  • The LDAP option is not available to users that want to connect to a LAN via an EX switch.
    OR
  • When configuring user access to the switch, the LDAP option is not available: 

root@EX4600# set system authentication-order ?
Possible completions:
  [                    Open a set of values
  password             Traditional password authentication
  radius               Remote Authentication Dial-In User Service
  tacplus              TACACS+ authentication services

Solution

As of Junos 15.1, LDAP Authentication is not supported in EX switches either for authenticated users connecting to a LAN or users accessing the EX for management of the device.

For authentication of users accessing a LAN, see Understanding Authentication on EX Series Switches .

For authentication of users managing an EX switch, see User Access and Authentication Feature Guide for Routing Devices .

Related Information