Administrator Guide

Security Commands 979
User Guidelines
This command configures the RADIUS authentication protocol used for
MAB devices connected to the interface.
CHAP is not supported for TACACS authentication.
The switch sends the following information to the RADIUS server for CHAP
Access-Requests:
1–User-Name—MAC address of MAB device.
3–CHAP-Password = Encrypted User Name.
4–NAS-IP-Address—IP address of the switch.
5–NAS-Port—Our internal port number.
6–Service-Type is set to 10 (Call-Check).
12–Framed-MTU—Port/switch MTU—header length (for example, 1500).
30–Called Station ID—MAC address of device (in xx:xx:xx:xx:xx:xx format).
31–Calling-Station ID—Switch MAC address.
60–CHAP-Challenge (if auth type is CHAP).
61–NAS-Port-Type (Ethernet 15).
87–NAS-Port-Id (e.g., Gigabitethernet 1/0/15)
The switch sends the following information to the RADIUS server for EAP
Access-Requests:
1–User-Name—MAC address of device.
4–NAS-IP-Address—IP address of the switch.
5–NAS-Port—Our internal port number.
12–Framed-MTU—Port/switch MTU—header length (for example, 1500).
30–Called Station ID—MAC address of device (in xx:xx:xx:xx:xx:xx format).
31–Calling-Station ID—Switch MAC address.
61–NAS-Port-Type (Ethernet 15).
The Calling Station ID is formatted per the attribute 31 command.
The User-Name attribute is formatted per the attribute 1 command.
The Access-Request attribute is formatted for PAP authentication.