— Exhibit —
user@switch> show configuration access
radius_server {
10.1.1.252 {
port 1812;
secret “$9$7gdwgGDkTz6oJz69A1INdb”; ## SECRET-DATA
}
profile radius_server {
authentication-order password;
radius {
authentication-server 10.1.1.252;
}
}
user@switch> show configuration protocols dot1x
authenticator {
ge-0/0/17.0 {
supplicant multiple;
}
}
user@switch> show configuration vlans
Sales_VLAN {
vlan-id 123;
}
user@switch> show configuration interfaces ge-0/0/17
unit 0 {
family ethernet-switching {
port-mode access;
}
}
— Exhibit —
Click the Exhibit button.
You are asked to place employees that are in the sales group into their own VLAN called
Sales_VLAN with a VLAN ID of 123 on port ge-0/0/17. The VLAN must be assigned dynamically.
After trying an initial configuration, you see that users in the sales group are not assigned to the
Sales_VLAN.
Referring to the exhibit, which two configuration statements are needed on the EX Series switch to
resolve this problem? (Choose two.)
A.
set access profile radius_server authentication-order radius
B.
set vlans Sales_VLAN interface ge-0/0/17.0
C.
set interfaces ge-0/0/17.0 family ethernet-switching vlan members Sales_VLAN
D.
set protocols dot1x authenticator authentication-profile-name radius_server
http://www.juniper.net/documentation/en_US/junos12.1×47/topics/example/layer-2-8021x-radius-server-security-configuring.html
[edit]
user@host# show access
radius-server {
10.0.0.100 {
port 1812;
secret “$9$mf5F6/tOBE”; ## SECRET-DATA
source-address 10.93.14.100;
}
}
profile profile1 {
authentication-order radius;
radius {
authentication-server 10.0.0.100;
}
}
[edit]
user@host# show protocols dot1x
authenticator {
authentication-profile-name profile1;
}