Nkwenye Ịnweta Ụjọ
Igwe ọkụ ọkụ
Ụdị 1.0

Mgba ọkụ na-enweta nkwa ike alụlụ

❖ This manual explains “Wired Switch Configuration.”
❖ The procedures were verified using Mist Cloud as of September 2025.
If the screen display differs from the actual screen, please refer to the update information below.
https://www.juniper.net/documentation/us/en/software/mist/product-updates/latest.html
❖ Settings and parameters may vary depending on the deployment environment and configuration.
For details on various settings, please see the links below.
Akwụkwọ alụlụ
Ntuziaka Nweta nkwenye nke Juniper Mist
❖ Many other Mist Japanese manuals are available on the “Solutions & Technical Information Site.”
https://www.juniper.net/jp/ja/local/solution-technical-information/mist.html
❖ The contents of this document are current as of the time of writing and are subject to change without notice.
Furthermore, the configurations and features described in this document cannot be purchased as a condition of their provision.
❖ The company names, product names, and logos mentioned in this document are trademarks or registered trademarks of their respective companies.

Akụkọ ihe mere eme

Ụdị	Updated date	gafereview
Ver 1.0	Septemba 2025	Mbipụta mbụ

Wired – Switch

Nhazi mgbanwe
Set [Authentication Servers] to [Mist Auth], configure IEEE802.1X authentication-related settings in [Port Profiles], specify the port in [Port IDs] under [Port Configuration], and specify the profile you created in [Configuration Profile].

Switch Templates: Create Template

1. From [Organization], click [Switch Templates].
2. Click [Create Template], enter a name for the template in [Template Name], and click [Create].3. Under [Authentication Servers], select [Mist Auth] and configure other options.

4. Under Port Profiles, click Add Profile

5. Set [Name], check [Use dot1x authentication], and set the required items.

5.(a) 802.1X Authentication: Check [Use dot1x authentication] (required).
Set other options.

[Use dot1x authentication]

Switch Templates: Port Profiles 802.1X

Nhọrọ	Nkọwa
Allow Multiple Supplicants	Check this box to allow multiple supplicants on the same port.
VLAN dị ike	Check [Dynamic VLAN] to dynamically assign VLANs. Click [+] to add a network. *Networks are configured separately.
Use Guest Network	Check [Use Guest Network] to authenticate to the guest network. Select a guest network from the drop-down list.
Bypass authentication when server is down	Check this box to allow clients to access the network without authentication if the server is down.
Reauthentication Interval	Set the reauthentication interval (10-65535 default: 65000).
Server Reject Network	To connect users to a specified VLAN (such as a guest network) if the authentication server rejects user authentication attempts, select [Server Reject] for [Network].
Server Fail Network	To connect users to a specified VLAN (such as a guest network) if the authentication server is unreachable or unresponsive, select [Server Fail] for [Network].

REF: Gbanwee Nhọrọ nhazi > Table 4: Port Profile Nhọrọ nhazi

Switch Templates: Port Profiles MAB

5.(b) MAB Authentication: Check [Use dot1x authentication] and [Mac authentication] (required).
Set other options.

Check [Use dot1x authentication] Check [Mac authentication] If dot1x authentication is attempted and fails, a MAB connection attempt (fallback) will be performed.
Check [Mac authentication only] to immediately attempt a MAB connection without attempting dot1x authentication.
Select an [Authentication Protocol] (None/pap/eap-peap/eap-md5).
The supplicant will present credentials using the specified authentication protocol.

Nhọrọ	Nkọwa
Allow Multiple Supplicants	Check this box to allow multiple supplicants on the same port.
VLAN dị ike	To dynamically assign VLANs, check [Dynamic VLAN]. Click [+] to add a network. *Networks are configured separately.
Protocol nyocha	Select an Authentication Protocol (None/pap/eappeap/eap-md5). The supplicant will present its credentials using the specified authentication protocol.
Use Guest Network	Check [Use Guest Network] to authenticate to the Guest Network. Select [Guest Network] from the drop-down list.
Bypass authentication when server is down	If checked, clients can access the network without authentication if the server is down.
Reauthentication Interval	Set the re-authentication interval (10-65535 default:65000)
Server Reject Network	To connect users to a specified VLAN (such as a guest network) if the authentication server rejects their authentication attempt, select [Network] for [Server Reject].
Server Fail Network	To connect users to a specified VLAN (such as a guest network) if the authentication server is unreachable or does not respond, select “Network” for “Server Fail Network.”

REF: Gbanwee Nhọrọ nhazi > Table 4: Port Profile Nhọrọ nhazi

Switch Templates: Select Switches Configuration > Port Configuration
6. Click [Add Rule] under [Select Switches Configuration], set [Name] on the [Info] tab, and specify the target device by [Applies to name], [Applies to switch role], or [Applies to switch model].

7. Click the Port Config tab and click Add Port Configuration.
Specify the interface to which the configuration applies in Port IDs, and select the profile you created in Configuration Profile.
Click to complete the Port Configuration settings, and click to complete the Rule settings.

Switch Templates: Assign to Sites / Save

8. Under [Applies to Sites], click [Assign to Sites], Select the sites to which you want to apply the template from [+] (multiple selections are possible), Click [Add], and then click [Apply].9. Complete the Switch Template settings in [Assign to Sites].

Per Switch Configuration

1. From [Switches], select the switch you want to configure.

2. Select [Mist Auth] under [Authentication Servers] and configure other options.

3. Under Port Profiles, click Add Profile4.(a) Port Profile: 802.1X Authentication

4.(b) Port Profile: MAB Authentication

5. Under Port Configuration, click Add Port Configuration. Specify the interface to which the configuration applies under Port IDs, and select the profile you created under Configuration Profile. Pịa .

6. Click [Save] to complete the settings.

You can configure these settings in any of the following locations:

• Organization > Switch Templates > {Template}
• Site > Switch Configuration > {Site}
• Switches > {Switch}

For manageability and scalability, configuring settings in Switch Templates is recommended.
You can also combine these settings by configuring the Network and Port Profile in the Switch Template and the Port Configuration on individual switches.

Port Profile/Client Info

Rịba ama
Select the switch in question from Switches and hover your mouse over the port to view information about it, including the authentication method.

DAALỤ

Akwụkwọ / akụrụngwa

Juniper Networks Mist Access Assurance Wired Switch [pdf] Ntuziaka onye ọrụ Mist Access Assurance Wired Switch, Assurance Wired Switch, Wired Switch

Ntụaka

• Akwụkwọ ntuziaka onye ọrụ