Description

This article helps with the dot1x configuration on EX and QFX Switch

Solution

DEVICE CONFIGURATION:
 

  • Define the address of the servers, and configure the secret password. The secret password on the switch must match the secret password on the server:

user@switch# set access radius-server <Radius-Server-IP> port <port-id>

user@switch# set access radius-server <Radius-Server-IP> secret <secret-name>

 

  • Configure the authentication order, making radius the first method of authentication:

user@switch# set access profile <Authentication-Profile-Name> authentication-order radius

 

  • Configure a list of server IP addresses to be tried in order to authenticate the supplicant:

user@switch#set access profile <Authentication-Profile-Name> radius authentication-server <Radius-Server-IP>

 

  • Protocol Configuration:

set protocols dot1x authenticator authentication-profile-name <Authentication-Profile-Name>

 

  • Supplicant Modes:

set protocols dot1x authenticator interface <interface_name>.0 supplicant <supplicant-mode0>
 
  • Optional commands as per the requirement
set protocols dot1x authenticator interface <interface-name> reauthentication interval 40
set protocols dot1x authenticator interface <interface-name> supplicant-timeout 30
set protocols dot1x authenticator interface <interface-name> server-timeout 30
set protocols dot1x authenticator interface <interface-name> transmit-period 30
set protocols dot1x authenticator interface <interface-name> maximum-requests 1
set protocols dot1x authenticator interface <interface-name> retries 3
 

Modification History

2024-09-12 : Article Created