This blog post hold the key ingredients for successfully authenticating on layer 2 (802.1x or dot1x) and layer 3 with:

• Junos Pulse supplicant
• Juniper Pulse Access Control Service a.k.a. Unified Access Control (UAC)
• Juniper EX2200 switch
• Microsoft Windows 7 Enterprise Edition

General Information

The setup consists of four networks (VLAN's) and Internet access. Inter-VLAN communication is handled by a Juniper SRX210. The four VLAN's are:

• Untrust (VLAN 20)
  The Internet
• Trust (VLAN 10 - 192.168.1.0/24)
  This VLAN hosts the UAC, Active Directory, DNS and DHCP services
• Production (VLAN 100 - 192.168.100.0/24)
  Network where the normal workstations are placed
• Quarantine (VLAN 200 - 192.168.200.0/24)
  This is where the naughty people/PC's are dropped

When a PC is placed in Quarantine, it looses all access to the Internet, but can still resolve domain names, access minimal internal services like the DHCP server and the UAC.

The components on the network are:

• Domain Controller + DNS Server - 192.168.1.10
• DHCP Server - 192.168.1.1
• UAC - 192.168.1.11
• Gateway(s) - .254