EAP Configuration Mode Commands

The EAP Configuration Mode is used to configure parameters comprising an Extensible Authentication Protocol (EAP) used to support authentication on the system.

Mode

Exec > Global Configuration > Context Configuration > EAP Profile Configuration

configure > context context_name > eap-porfile profile_name

Entering the above command sequence results in the following prompt: 

[context_name]host_name(cfg-ctx-eap-profile)#

Important

The commands or keywords/variables that are available are dependent on platform type, product version, and installed license(s).

end

Exits the current configuration mode and returns to the Exec mode.

Product

All

Privilege

Security Administrator, Administrator

Syntax

end

Usage Guidelines

Use this command to return to the Exec mode.

exit

Exits the current mode and returns to the parent configuration mode.

Product

All

Privilege

Security Administrator, Administrator

Syntax

exit

Usage Guidelines

Use this command to return to the parent configuration mode.

max-retry

Configures the maximum number of times the system will retry communicating with another EAP device.

Product

ASN-GW

PDIF

Privilege

Security Administrator, Administrator

Mode

Exec > Global Configuration > Context Configuration > EAP Profile Configuration

configure > context context_name > eap-porfile profile_name

Entering the above command sequence results in the following prompt: 

[context_name]host_name(cfg-ctx-eap-profile)#

Syntax

max-retry num
default max-retry

max-retry num

Specifies the number of times to retry EAP communication with another device as an integer from 1 to 65535. Default: 16

Usage Guidelines

Use this command to set a maximum retry number for communicating with other EAP devices.

Example

The following command sets the maximum number of retries to 50 : 
max-retry 50

mode

Configures the system as one of three types of EAP devices: authenticator pass-through, authenticator server, or peer.

Product

ASN-GW

PDIF

Privilege

Security Administrator, Administrator

Mode

Exec > Global Configuration > Context Configuration > EAP Profile Configuration

configure > context context_name > eap-porfile profile_name

Entering the above command sequence results in the following prompt: 

[context_name]host_name(cfg-ctx-eap-profile)#

Syntax

mode { authenticator-pass-through | authenticator-server | peer }
default mode

default

Configures the default mode of Authenticator-pass-through.

authenticator-pass-through

Configures the system as an authenticator pass-through allowing EAP authentication to be performed by another server.

This is the default setting for this command.

authenticator-server

Configures the system as an authenticator server. This allows the system to respond to EAP requests.

peer

Configures the system as a peer device requiring it to make EAP requests of another server or pass-through device.

Usage Guidelines

Use this command to configure the system to perform as one of three types of EAP devices and configure settings in an EAP mode.

EAP Mode Configuration Mode commands are defined in the EAP Mode Configuration Mode Commands chapter.

Example

The following command configures the system to perform as an authenticator pass-through: 
mode authenticator-pass-through