[j-nsp] DHCP snoop/DAI/IPSG and mac-based vlans?

Chuck Anderson cra at WPI.EDU
Wed Oct 2 17:03:19 EDT 2013


Yes, we are using MAC RADIUS with DHCP Snooping/DAI/IPSG.  Everything
also works with the VOIP feature so LLDP assigns a tagged VLAN to IP
phones.

On Tue, Oct 01, 2013 at 09:10:55AM +0100, Phil Mayers wrote:
> Does anyone know if the layer2 security features in $subj work at
> the same time as dynamically-allocated vlans via 802.1x/macauth and
> RADIUS?
> 
> I know of a few platforms from other vendors where this isn't the
> case - the DHCP/ARP/IPSG "punts" are bound to the static combo of
> port&vlan defined in the config - and am wondering if this is true
> on the EX switches. The docs don't really specify, and I don't have
> a unit to test (but if it *does* work, may get one ;o)


More information about the juniper-nsp mailing list