Extreme Networks Summit 200-24 - Disabling Network Login; Using EAPOL Flooding

Using EAPOL Flooding
Summit 200 Series Switch Installation and User Guide 71
Temp IP: Unknown
DHCP: Not Enabled
User: Unknown MAC: Unknown
In this example, the user is using campus mode and no authentication has taken place. Therefore, the
port state displays as not authenticated. No packets sent by the user on port 9 will get past the port
until authentication takes place. After authentication has taken place and the permanent IP address is
obtained, the show command displays the port state as authenticated.
#show netlogin info ports 9 vlan corp
Port 9: VLAN: corp
Port State: Authenticated
Temp IP: Unknown
DHCP: Not Enabled
User: auto MAC: 00:10:A4:A9:11:3B
Disabling Network Login
Network login must be disabled on a port before you can delete a VLAN that contains that port. To
disable network login, use the following command:
disable netlogin ports <portlist> vlan <name>
Using EAPOL Flooding
Port-based Network Access Control (IEEE 802.1x) uses Extensible Authentication Protocol (EAP) as the
underlying mechanism for transferring information between the three network entities engaged in the
IEEE 802.1x port authentication access control process: the supplicant, the authenticator, and the
authenticating server. The encapsulating mechanism used for communication between the supplicant
and the authenticator is referred to as EAP Over LANs, or EAPOL.
By default (per IEEE 802.1D), Summit 200 series switches do not forward EAPOL frames. Under certain
conditions, you might opt to change this behavior to support an upstream central authenticator by
enabling the switch to flood the EAPOL frame on the VLAN associated with the ingress port.
The following example enables EAPOL frame flooding on a Summit 200 series switch:
enable eapol-flooding
When EAPOL flooding is enabled on the switch, you can verify that status by using the command:
show config
The following example disables EAPOL frame flooding on a Summit 200 series switch:
disable eapol-flooding
You can verify the current EAPOL flooding state by using the command:
show eapol-flooding
Table 22 describes the commands used to configure EAPOL flooding.