JNCIP-ENT Layer 2 Authentication And Access Control Practice Question
You are implementing MAC RADIUS authentication on an EX4600 switch. You notice that when a device connects, the switch sends the MAC address in the Username attribute (RADIUS attribute 1) with hyphen separators (e.g., aa-bb-cc-dd-ee-ff). Your RADIUS server expects colons (aa:bb:cc:dd:ee:ff). Where must you configure this format change on Junos OS?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Under [edit protocols access-profile profile-name mac-radius] using the format option.
Junos OS allows modifying the MAC address format sent to the RADIUS server using the 'mac-radius' configuration hierarchy under access profile or interface settings, specifically via the 'mac-питан' or format options.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Under [edit protocols access-profile profile-name mac-radius] using the format option.
Why this is correct
Correct. Access profile configurations define the MAC address format for RADIUS requests.
- ✗
Under [edit system radius-server server-name] using the attribute-format option.
Why it's wrong here
Incorrect. System radius-server parameters do not define MAC formatting.
- ✗
Under [edit interfaces ge-0/0/1 unit 0 family ethernet-switching] using the mac-radius format command.
Why it's wrong here
Incorrect. Interface level does not configure the string format of MAC RADIUS.
- ✗
Under [edit access profile profile-name firewall] using the translation map.
Why it's wrong here
Incorrect. Firewall hierarchies do not alter RADIUS request parameters.
Quick reference
AAA Protocol Comparison
| Protocol | Port(s) | Encryption | Transport | Primary Use |
|---|---|---|---|---|
| RADIUS | 1812 / 1813 | Password only | UDP | Network access control |
| TACACS+ | 49 | Full packet | TCP | Device administration |
| Diameter | 3868 | Full session | TCP / SCTP | Carrier / mobile networks |
| 802.1X | — | EAP-based | Layer 2 | Port-based access control |
TACACS+ encrypts the entire packet; RADIUS only encrypts the password field — a key exam distinction.
About these practice questions
One of 332 original JNCIP-ENT practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed August 2026 · checked against the official Juniper Networks exam blueprint
This JNCIP-ENT practice question is part of Courseiva's free Juniper Networks certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the JNCIP-ENT exam.