Configuring Eapoudp; Configuring Identity Profiles And Policies - Cisco 7604 Configuration Manual

Chapter 45 Configuring Network Admission Control

Configuring EAPoUDP

To configure the EAPoUDP, beginning in privileged EXEC mode, perform this task:
Command
Step 1
Router# configure terminal
Step 2
Router(config)# eou allow {clientless |
ip-station-id}
eou default
eou logging
eou max-retry number
eou port port_number
eou ratelimit number
eou timeout {aaa seconds | hold-period seconds |
retransmit seconds | revalidation seconds |
status-query seconds }
eou revalidate
Step 3
Router(config)# interface interface_id
Step 4
Router(config)# eou default
eou max-retry number
eou timeout {aaa seconds | hold-period seconds |
retransmit seconds | revalidation seconds |
status-query seconds }
eou revalidate
Step 5
end
Step 6
Router# show eou {all | authentication
{clientless | eap | static} | interface
interface_id | ip ip_address | mac mac_address |
posturetoken name }
Step 7
Router# copy running-config startup-config
To return to the global default EAPoUDP values, use the no forms of the eou global configuration
commands. To disable the EAPoUDP associations, use the no forms of the eou interface configuration
commands.

Configuring Identity Profiles and Policies

To configure the identity profile and policy beginning in privileged EXEC mode, perform this task:
Command
Step 1
Router# configure terminal
Step 2
Router(config)# identity policy policy_name
Step 3
Router(config-identity-policy)# access-group
access_group
Step 4
Router(config)# identity profile eapoudp
OL-4266-08
Purpose
Enters global configuration mode.
Specifies EAPoUDP values.
For more information about the allow, default, logging,
max-retry, port, rate-limit, revalidate, and timeout
keywords, see the command reference for this release and
the Network Admission Control feature module.
Enters interface configuration mode.
Enables and configures the EAPoUDP association for the
specified interface.
For more information about the default, max-retry,
revalidate, and timeout keywords, see the command
reference for this release and the Network Admission
Control feature module.
Returns to privileged EXEC mode.
Displays information about the EAPoUDP configuration
or session cache entries.
(Optional) Saves your entries in the configuration file.
Purpose
Enters global configuration mode.
Creates an identity policy, and enters identity-policy
configuration mode.
Defines network access attributes for the identity policy.
Creates an identity profile, and enters identity-profile
configuration mode.
Cisco 7600 Series Router Cisco IOS Software Configuration Guide, Release 12.2SX
Configuring NAC
45-17