Description

Observing commit error while configuring multiple supplicant for the layer-2 interfaces in the device.

Symptoms

[edit protocols dot1x authenticator interface all supplicant]

 'supplicant multiple'

   Only supported for layer-2 interfaces

error: configuration check-out failed: (statements constraint check failed)

Solution

Multiple supplicant mode authenticates multiple end devices individually on one authenticator port.

The error states that the multiple supplicant is allowed only for layer-2 interfaces, if you have any existing layer-3 interface configuration and when you apply dot1x multiple supplicant for all the interfaces, you might get the commit error as above.
> Deleting the interface all configuration will resolve the commit error.


           #delete protocol dot1x authenticator interface all supplicant multiple

> If multiple supplicant needs to be configured for more than one interface then it needs to be configured individually.
         
       #set protocol dot1x authenticator interface <interface-name> supplicant multiple

Modification History

2023-12-25: Added technical document link
2023-12-21 : Article Created

Related Information

2023-1215-030570
https://www.juniper.net/documentation/us/en/software/junos/user-access/topics/example/802-1x-pnac-single-supplicant-multiple-supplicant-configuring.html