If the EAPoL-enabled PC is not the only device on the port (i.e if there is also an IP phone connected), the 'eapol multihost mac-max' value should be not less than the number of authenticating devices. If the 'eapol multihost mac-max' value equals 1, after the first device is authenticated (be it EAP or NEAP) - EAPoL-Start packet from the next device trying to authenticate on the same port will be ignored (will not initiate EAP conversation).
|
