Users Guide

Security Commands 939
User Guidelines
Use this command to override the format of the Calling-Station-ID MAC
address sent in authentication Access-Request for ports configured for 802.1X
MAC-based or MAB authentication for a specific RADIUS server.
This command is only supported for 802.1X authentication.
This command overrides the global configuration for attribute 31 (Calling-
Station-ID). Use the mab request format command to control the formatting
of the User-Name (1) attribute.
Command History
Introduced in version 6.3.0.1 firmware. Description update in release 6.5.0 to
remove the User-Name formatting control.
Example
This example configures the format of the MAC address sent in MAC based
authentication to IETF lower case for the RADIUS server at address 1.2.3.4.
MAB must be configured on the switch in an active authentication list, IEEE
802.1X must be configured, and a RADIUS server must also be configured.
console(config)#radius server auth 1.2.3.4
console(config-auth-radius)# attribute 31 mac format ietf lower-case
attribute 168 include-in-access-req
Use the attribute 168 include-in-access-req command to enable the switch to
send the RADIUS Framed-IPv6-Address attribute in Access-Request
messages sent to the RADIUS authentication server.
Syntax
attribute 168 include-in-access-req
no attribute 168 include-in-access-req
Default Configuration
By default, RADIUS attribute 168 is not sent.