You can see the working configuration and build your plan accordingly.
xx@swtaq> show configuration protocols dot1x
authenticator {
authentication-profile-name ex_radius;
no-mac-table-binding;
interface {
ge-0/0/21.0 {
supplicant multiple;
quiet-period 15;
transmit-period 15;
mac-radius;
supplicant-timeout 10;
server-reject-vlan DEAD;
lldp-med-bypass;
server-fail use-cache;
}
ge-0/0/22.0 {
supplicant multiple;
quiet-period 15;
transmit-period 15;
mac-radius;
supplicant-timeout 10;
server-reject-vlan DEAD;
lldp-med-bypass;
server-fail use-cache;
xx@swtaq> show configuration ethernet-switching-options secure-access-port
interface User-Ports {
mac-limit 6 action drop;
no-dhcp-trusted;
}
interface ae11.0 {
dhcp-trusted;
}
vlan LAB {
arp-inspection;
examine-dhcp;
}