Dell PowerConnect J-8216 Software Guide for JUNOS version 10.3 - Page 2332

Dell PowerConnect J-Series Ethernet Switch Complete Software Guide for Junos OS contains optional VLAN information, then the user is moved to the VLAN specified by the RADIUS server and not to the locally configured guest-VLAN. Authentication can fail for many reasons: • The host device does not have supplicant software on it (for example, the host is not 802.1X-enabled, such as a printer). • The supplicant provided invalid credentials-a username or password that were not authenticated by the authentication server. For hosts that are not 802.1X-enabled, the guest VLAN could allow limited access to a server from which the non-802.1X-enabled host can download the supplicant software and attempt authentication again. Related • Example: Setting Up 802.1X in Conference Rooms to Provide Internet Access to Documentation Corporate Visitors on a J-EX Series Switch on page 2276 • Understanding Dynamic VLANs for 802.1X on J-EX Series Switches on page 2259 Understanding 802.1X and RADIUS Accounting on J-EX Series Switches J-EX Series Switches support IETF RFC 2866, RADIUS Accounting. Configuring RADIUS accounting on a J-EX Series switch permits statistical data about users logging onto or off a LAN to be collected and sent to a RADIUS accounting server. The statistical data gathered can be used for general network monitoring, to analyze and track usage patterns, or to bill a user based upon the amount of time or type of services accessed. To configure RADIUS accounting, specify one or more RADIUS accounting servers to receive the statistical data from the switch, and select the type of accounting data to be collected. The RADIUS accounting server you specify can be the same server used for RADIUS authentication, or it can be a separate RADIUS server. You can specify a list of RADIUS accounting servers. In the event that the primary server (the first one configured) is unavailable, each RADIUS server in the list is tried in the order in which they are configured in the Junos OS. The RADIUS accounting process between a switch and a RADIUS server works like this: 1. A RADIUS accounting server listens for User Datagram Protocol (UDP) packets on a specific port. For example, on FreeRADIUS, the default port is 1813. 2. The switch forwards an accounting-request packet containing an event record to the accounting server. For example, a supplicant is authenticated through 802.1X authentication and connected to the LAN. The event record associated with this supplicant contains an Acct-Status-Type attribute whose value indicates the beginning of user service for this supplicant. When the supplicant's session ends, the accounting request will contain an Acct-Status-Type attribute value indicating the end of user service. The RADIUS accounting server records this as a stop-accounting record containing session information and the length of the session. 2260