802.1X assignment of GBP tags using the RADIUS server

We've added these enhancements to the group-based policy (GBP) micro segmentation feature: 

• Support for a new VSA "Juniper-Group-Based-Policy-Id" to assign GBP tags dynamically from RADIUS. Support for these new CLI statements: 
• Set protocols dot1x authenticator interface [interface-name ] server-fail gbp-tag gbp-tag Specify the GBP tag to apply on the interface when the server is inaccessible. 
• Set protocols dot1x authenticator interface [interface-name ] server-reject-vlan gbp-tag gbp-tag Specify the GBP tag to apply when RADIUS rejects the client authentication. 
• Set protocols dot1x authenticator interface [interface-name ] guest-gbp-tag gbp-tag
  Specify the GBP tag to apply, when an interface is moved to a guest VLAN when no 802.1X supplicants are connected on the interface.