Dynamic VLAN assignment using 802.1X authentication relies on vendor-specific attributes (VSAs) to assign VLANs dynamically based on the authentication results. The modes that support using VSAs for dynamic VLAN assignment are:
* Single-Secure Supplicant Mode: This mode supports a single secure client on a port and can use VSAs to dynamically assign VLANs based on the authentication result.
* Multiple Supplicant Mode: This mode supports multiple clients on a single port, each with its own authentication session, and can use VSAs to dynamically assign VLANs.
References:
* The Juniper documentation and configuration guides discuss the capabilities of these modes in supporting dynamic VLAN assignment through VSAs. Specific configuration examples and guidelines can be found in the documents:
* Useful Juniper Commands.txt
* Tech Ops Managed Router Juniper Install Guide
# Example of enabling single-secure supplicant mode
set protocols dot1x authenticator interface ge-0/0/1.0 supplicant multiple
# Example of enabling multiple supplicant mode
set protocols dot1x authenticator interface ge-0/0/1.0 supplicant multiple