Juniper Wired Layer 2 Integration(URL redirect,ACL)

This configuration example illustrates how to use EX Series switches and NAC to implement central Web authentication of guest users. Specifically, it illustrates how to use the following EX Series switch features in conjunction with NAC :

• The built-in firewall filter JNPR_RSVD_FILTER_CWA, which allows a guest endpoint that has not yet been authenticated to access the services required for central Web authentication while blocking access to the rest of the network.

• The Juniper-CWA-Redirect-URL RADIUS VSA, which allows NAC to pass the redirect URL to the switch as part of the authentication process.

• RADIUS CoA support, which allows an EX Series switch to dynamically change the firewall filter in effect for a guest endpoint after the endpoint is authenticated.