102
Configuring Security using the CLI
The syntax for the
show eapol multihost non-eap-mac status
command is:
show eapol multihost non-eap-mac status [<portList>]
"show eapol multihost non-eap-mac status command parameters and
variables" (page 102)
describes the parameters and variables for the
show
eapol multihost non-eap-mac status
command.
show eapol multihost non-eap-mac status command parameters and variables
Parameter and Variables
Description
portList
List of ports
The following figure displays sample output from the show eapol multihost
non-eap-mac status command:
Figure 15
show eapol multihost non-eap-mac status command output
Configuring support for non-EAPOL hosts on EAPOL-enabled
ports
This section describes how to configure nonE-APOL authentication.
To configure support for non-EAPOL hosts on EAPOL-enabled ports, do
the following:
1. Enable non-EAPOL support globally on the switch and locally (for the
desired interface ports), using one or both of the following authentication
methods:
a. local authentication (see
"Enabling local authentication of
non-EAPOL hosts on EAPOL-enabled ports" (page 103)
)
b. RADIUS authentication (see
"Enabling RADIUS authentication of
non-EAPOL hosts on EAPOL-enabled ports" (page 103)
)
2. Enable EAPOL multihost on ports
3. Specify the maximum number of non-EAPOL MAC addresses allowed
on a port (see
"Specifying the maximum number of non-EAPOL hosts
allowed" (page 105)
).
4. For local authentication only, identify the MAC addresses of non-EAPOL
hosts allowed on the ports (see
"Creating the allowed non-EAPOL MAC
address list" (page 105)
).
Nortel Ethernet Routing Switch 2500 Series
Security — Configuration and Management
NN47215-505 (323165-B)
02.01
Standard
4.1
19 November 2007
Copyright © 2007, Nortel Networks
.
