# Configuring advanced port-based EAPOL using EDM

Use the following procedure to configure advanced EAPOL security parameters for an individual port or multiple ports.

## Procedure steps

1. In the Device Physical View, select a port.

2. Right-click the selected Port.

3. In the shortcut menu, click Edit.

   The Port tab appears.

4. In the work area, click the EAPOL Advance tab.

5. Configure the parameters as required.

6. In the toolbar, click Apply.

## Variable definitions

The following table describes the fields of the port-based EAPOL Advance tab.

Variable | Value
--- | ---
DefaultEapAll | Restores all EAP settings for the specified port(s).
GuestVlanEnabled | Enables or disables Guest VLAN functionality.
GuestVlanId | Specifies the VLAN ID of the VLAN that acts as the Guest VLAN. The default is 2. The Guest VLAN ID can be between 0 and 4094. Important Use 0 to indicate a global Guest VLAN ID.
MultiHostMaxMacs | Specifies the maximum number of clients allowed on this port. Range is between 1 and 64. DEFAULT: 1.
MultiHostEnabled | Enables or disables Multiple Host/MAC support with Multiple Authentication (MHMA).
MultiHostEapMaxNumMacs | Specifies the maximum number of EAPOL-authenticated clients allowed on this port. The default is 2. The maximum number can be between 1 and 32.
MultiHostAllowNonEapClient | Enables or disables support for non-EAPOL clients using local authentication.
MultiHostNonEapMaxNumMacs | Specifies the maximum number of non-EAPOL clients allowed on this port. The default is 1. The maximum number can be between 1 and 32.
MultiHostSingleAuthEnabled | Enables or disables Multiple Host with Single Authentication (MHSA) support for non-EAPOL clients.
MultiHostRadiusAuthNonEapClient | Enables or disables support for non-EAPOL clients using RADIUS authentication.
MultiHostAllowNonEapPhones | Enables or disables support for Avaya IP Phone clients as another non-EAP type.
MultiHostAllowRadiusAssignedVlan | Enables or disables support for VLAN values assigned by the RADIUS server.
MultiHostAllowNonEapRadiusAssignedVlan | Enables or disables support for non-EAP VLAN values assigned by the RADIUS server.
MultiHostUseMostRecentRadiusAssignedVlan | Enables or disables the use of the most recent VLAN values assigned by the RADIUS server.
MultiHostEapPacketMode | Specifies the mode of EAPOL packet transmission (multicast or unicast).
MultiHostBlockDifferentVlanAuth | Enables or disables the block subsequent MAC authentication feature.
EapProtocolEnabled | Enables or disables processing of EAP protocol packets.
ProcessRadiusRequestsServerPackets | Enables or disables the processing of RADIUS request server packets.