<<

NAME

pf::Switch::Juniper - Object oriented module manage Juniper' switches

STATUS

Supports MAC Authentication (MAC RADIUS in Juniper's terms)

Developed and tested on Juniper ex4200-48t running on JUNOS 10.3R1.9

BUGS AND LIMITATIONS

Bouncing a port is slow

Bouncing a port is done on a VLAN change when in MAC Authentication. Because of the lack of SNMP read-write capabilities on the IF-MIB, a full disable / commit / enable / commit is performed on the switch making it very slow.

Voice over IP

Users behind VoIP phones are not supported yet.

SUBROUTINES

NasPortToIfIndex

NAS-Port's number is the ifIndex index. Ex: NAS-Port 115 is the 115th ifIndex entry which is ifIndex 598.

setAdminStatus

Sets Admin Status of a port.

Right now the only way to do it is from the CLi (through Telnet or SSH).

Warning: This is really slow! About 6 second for the link change.

handleReAssignVlanTrapForWiredMacAuth

Called when a ReAssignVlan trap is received for a switch-port in Wired MAC Authentication.

AUTHOR

Inverse inc. <info@inverse.ca>

COPYRIGHT

Copyright (C) 2005-2015 Inverse inc.

LICENSE

This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version.

This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details.

You should have received a copy of the GNU General Public License along with this program; if not, write to the Free Software Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.

<<