Switching

 View Only
last person joined: 3 days ago 

Ask questions and share experiences about EX and QFX portfolios and all switching solutions across your data center, campus, and branch locations.
  • 1.  Question on Static MAC Bypass

     
    Posted 07-16-2024 13:06

    Hi.

    Here is a sample Static MAC Bypass configuration.

    protocols {

       dot1x {

          authenticator {

             authentication-profile-name my-profile;

             static {

                00:00:00:00:00:01;

             }

             interface ge-0/0/0.0;

             interface ge-0/0/1.0;

          }

       }

    }

    In the above configuration, will the MAC address 00:00:00:00:00:01 have its authentication succeed on all both ge-0/0/0.0 and ge-0/0/1.0 or neither?

    (Unfortunately, I don't have a lab available for testing.)

    Thanks,

    Deepak

        



  • 2.  RE: Question on Static MAC Bypass

    Posted 07-16-2024 19:32

    The configuration would succeed on both ge-0/0/0.0 and ge-0/0/1.0

    All interfaces would be this.

    protocols {
    
       dot1x {
    
          authenticator {
    
             authentication-profile-name my-profile;
    
             static {
    
                00:00:00:00:00:01;
    
             }
    
             interface all
    
          }
    
       }
    
    }


    ------------------------------
    Steve Puluka BSEET - Juniper Ambassador
    IP Architect - DQE Communications Pittsburgh, PA (Metro Ethernet & ISP - Retired)
    http://puluka.com/home
    ------------------------------