Securing your network
95
Configuring multihost support
To configure multihost support, do the following:
1. Enable multihost support for the interface. The relevant command is
executed in Interface Configuration mode. You can issue the command
for the interface selected when you enter the Interface Configuration
mode (so that all ports have the same setting), or you can issue the
command for specific ports on the interface.
2. Specify the maximum number of EAP clients allowed on each multihost
port. You can issue the command for the interface selected when you
enter the Interface Configuration mode (so that all ports have the same
setting), or you can issue the command for specific ports on the interface.
eapol multihost command
The
eapol multihost
command controls
the global multihost settings.
The syntax for the
eapol multihost
command is:
eapol multihost { [allow-non-eap-enable] [auto-non-eap-mhsa
-enable] [radius-non-eap-enable] [use-radius-assigned-vlan]
[non-eap-pwd-fmt {[ip-addr] [mac-addr] [port-number]}]}
This command is executed in the Global Configuration command mode.
"eapol multihost parameters and variables" (page 95)
describes the
parameters and variables for the
eapol multihost
command.
eapol multihost command parameters and variables
Parameters and variables
Description
allow-non-eap-enable
Enables MAC addresses of non-EAP
clients.
auto-non-eap-mhsa-enable
Enables auto-authentication of
non-EAP clients in MHSA mode
radius-non-eap-enable
Enables Radius authentication of
non-EAP clients
use-radius-assigned-vlan
Allows use of Radius-assigned VLAN
value
non-eap-pwd-fmt { [ip-addr]
[mac-addr] [port-number] }
Sets bits in RADIUS non-EAPOL
password format
no eapol multihost command
The
no eapol multihost
command
disables EAPOL multihost.
This command is executed in the Global Configuration command mode.
Nortel Ethernet Routing Switch 2500 Series
Security — Configuration and Management
NN47215-505 (323165-B)
02.01
Standard
4.1
19 November 2007
Copyright © 2007, Nortel Networks
.
Summary of Contents for 2526T
Page 227: ......
