Hi Chris
Thanks for response
I want to authenticate IAP itself, so to use supplicant build in IAP itself and the role of switch is authnticator for IAP, ClearPass is radius server.
I'm deploying ClearPass and want to have colorless ports on switch with the same config.
This concerns only IAP itself not user traffic. IAP authenticate to netwotk during startup only before any user traffic goes.
I have received some info from Juniper guys that 802.1x is not supported for EX3300 for trunk ports.
My only idea for this moment is to tunnel traffic with GRE tunnel fro IAP to firewall, but It is always a little bit compliated.
regards
Karol