Dear community, I want that my EX-3300 blocks the access to the interface ge-0/0/0 as long as the supplicant is not authenticated. The authentication should run with the help of a RADIUS-Server. I am new in the Juniper world, therefore I need your help to find the mistake that I have done. My first step is now to get a request at the RADIUS-Server, when I plug a device into ge-0/0/0. Altough I can successful ping the RADIUS-Server, there arise no traffic at the RADIUS-Server. I tested the connection to the RADIUS with a tool called NTRadPing, which simulates a authentication requests at the RADIUS, to check if the firewall or something else interrupts the procedure, but this test was successful too. As soon as I try to connect a device to ge-0/0/0, only the block is working and my DHCP-Server does not give the client the network configuration parameters. Since more than two days, I am struggeling to get a request at the RADIUS-Server. I would be very grateful, if someone could help me.
This is my configuration (I shortened it and took only the relevant information out of it):
system {
root-authentication {
encrypted-password "XXXXXXXX"; ## SECRET-DATA
}
syslog {
user * {
any emergency;
}
file messages {
any notice;
authorization info;
}
file interactive-commands {
interactive-commands any;
}
}
}
interfaces {
ge-0/0/0 {
unit 0 {
family ethernet-switching {
port-mode access;
vlan {
members A100;
}
}
}
}
ge-0/0/20 {
unit 0 {
family ethernet-switching {
port-mode access;
vlan {
members A400;
}
}
}
}
vlan {
unit 400 {
family inet {
address 100.XXX.XXX.2/29;
}
}
}
}
routing-options {
static {
route 0.0.0.0/0 next-hop 100.XXX.XXX.1;
}
}
protocols {
igmp-snooping {
vlan all;
}
dot1x {
traceoptions {
file dot1x size 5m;
flag all;
}
authenticator {
authentication-profile-name profile1;
interface {
ge-0/0/0.0 {
supplicant single;
retries 3;
transmit-period 3;
reauthentication 1;
supplicant-timeout 3;
server-timeout 3;
maximum-requests 3;
}
}
}
}
rstp;
lldp {
interface all;
}
lldp-med {
interface all;
}
}
access {
radius-server {
94.XXX.XXX.41 {
port 1812;
secret "XXXXXXXXXX"; ## SECRET-DATA
source-address 100.XXX.XXX.2;
}
}
profile profile1 {
authentication-order radius;
radius {
authentication-server 94.XXX.XXX.41;
}
}
}
ethernet-switching-options {
storm-control {
interface all;
}
}
vlans {
A100 {
vlan-id 100;
}
A400 {
vlan-id 400;
l3-interface vlan.400;
}
}