Users Guide

Security Commands 1066
When used with an interface parameter, this command clears all 802.1X
sessions on the interface by removing the authentication information,
reseting the 802.1X state machine, and denying network access to the
authenticated device. Use with caution.
Command History
Syntax updated in version 6.6 firmware.
default mab
Use the default mab command to configure the switch to transmit EAP or
CHAP or PAP credentials to the RADIUS server for MAB-authenticated
devices connected to the interface. Use the no form of the command to set
the protocol to the default.
Syntax
default mab [eap|chap|pap]
no default mab
• eap—Use EAP Message Digest 5 authentication.
• chap—Use Challenge Handshake Authentication Protocol.
• pap—Use Password Authentication Protocol.
Default Configuration
The default protocol is EAP-MD5.
Command Mode
Interface Configuration (Ethernet) mode
User Guidelines
This command configures the RADIUS authentication protocol used for
MAB devices connected to the interface.
CHAP and PAP are not supported for TACACS authentication.
The switch sends the following information to the RADIUS server for CHAP
Access-Requests: