Mac Address-Based Security; Eapol-Based Security - Nortel 2526T Configuration

When RADIUS password fallback is disabled, you must specify the RADIUS
username and password from the NetLogin screen. Unless the RADIUS
server is configured and reachable, you cannot log on to the switch to
authenticate the login and password.
The Radius password fallback feature is disabled by default.
You can use the following CLI commands to enable and disable this feature:
•
•
The no radius-server CLI command disables the RADIUS fallback feature,
along with the remaining RADIUS configuration.

MAC address-based security

The MAC address-based security feature lets you set up network access
control, based on source MAC addresses of authorized stations.
You can:
•
•
•
The MAC address-based security feature is based on Nortel BaySecure
LAN Access for Ethernet, a real-time security system that safeguards
Ethernet networks from unauthorized surveillance and intrusion.

EAPOL-based security

The Ethernet Routing Switch 2500 Series provides security on the basis
of Extensible Authentication Protocol over LAN (EAPOL), and it uses the
EAP as is given in the IEEE 802.IX so that you can set up a network access
control over LANs. With EAP, you can authenticate user information through
a connection between a client and the switch by using an authentication
Copyright © 2007, Nortel Networks
.
radius-server password fallback
no radius-server
Create a list of up to 448 MAC addresses and specify which addresses
are authorized to connect to your switch. The 448 MAC addresses
can be configured within a single standalone switch, or they can be
distributed in any order among the units in a single stack configuration.
Specify which of your switch ports each MAC address is allowed to
access.
The options for allowed port access include: NONE, ALL, and single or
multiple ports that are specified in a list.
Specify optional actions to be exercised by your switch if the software
detects a security violation.
The response can be to send a trap, turn on destination address (DA)
filtering, disable a specific port, or any combination of these three
options.
Nortel Ethernet Routing Switch 2500 Series
Security — Configuration and Management
NN47215-505 (323165-B) 02.01 Standard
4.1 19 November 2007
Configuring Security options 21
ATTENTION