Configuring EAP on an interface

Configure EAP on an interface.

Before you begin

EAP must be globally enabled.

About this task

When you configure a port with the EAP status of auto (Authorization depends on result of EAP authentication), only one supplicant is allowed on this port. Multiple EAP supplicants are not allowed on the same physical switch port.

Procedure

Enter GigabitEthernet Interface Configuration mode:

enable

configure terminal

interface GigabitEthernet {slot/port[/sub-port][-slot/port[/sub-port]][,...]}

Note

If the platform supports channelization and the port is channelized, you must also specify the sub-port in the format slot/port/sub-port.
Enable EAP on an interface:

eapol status {authorized|auto}
Disable EAP on on interface:

no eapol status

Example

Enable EAP on an interface:

Switch:1>enable
Switch:1#configure terminal
Switch:1(config)#interface GigabitEthernet 1/2
Switch:1(config-if)# eapol status auto

Disable EAP on an interface:

Switch:1>enable
Switch:1#configure terminal
Switch:1(config)#interface GigabitEthernet 1/2
Switch:1(config-if)# no eapol status

Variable Definitions

The following table defines parameters for the eapol status command.


Variable	Value
authorized	Specifies that the port is always authorized. The default value is authorized.
auto	Specifies that port authorization depends on the results of the EAP authentication by the RADIUS server. The default value is authorized.