Users Guide

Security Commands 953
The switch discovers the client IPv4 address via its inclusion in the RADIUS
Access-Accept, via DHCPv4 snooping. DHCPv4 snooping must be enabled
for the switch to discover a host IPv4 prefix via DHCP.
After an Access-Accept has been received by the switch and the switch grants
the host access to the network, it may take a few seconds before the DHCP
transaction completes. Use the aaa accounting delay-start command to delay
the sending of the Acct-Start packet to the accounting server. Accounting
packets are not sent for ports placed in the Guest VLAN. Multiple hosts are
allowed access on a port configured in auto mode which is placed in the
Guest VLAN.
Use the show dot1x clients command to display the RADIUS discovered IPv4
address, if any.
Command History
Introduced in version 6.3.0.1 firmware. Command updated in firmware
release 6.5.2.
Example
console#conf
console(config)#radius server attribute 8 include-in-access-req
radius server attribute 25
Use the radius server attribute 25 command to globally enable the switch to
send the RADIUS Class attribute as supplied by the RADIUS server in
accounting messages sent to the accounting server.
Syntax
radius server attribute 25 include-in-access-req
no radius server attribute 25 include-in-access-req
Default Configuration
By default, the switch sends the Class attribute to the accounting server if
received in the Access-Accept from the RADIUS authentication server.