Users Guide

Security Commands 992
User Guidelines
This command is used to enable MAC Authentication Bypass (MAB) on an
interface. MAB is a supplemental authentication mechanism that allows
802.1x unaware clients—such as printers, fax machines, and some IP phones,
to authenticate to the network using the client MAC address as an identifier.
However, MAB can also be used to authenticate 802.1x aware clients in some
configurations. This command also provides options to specify the type of
authentication to be used, which can be either EAP-MD5, PAP, CHAP.
Authentication of a user via MAB will not occur until the re-authentication
period timer expires.
When using MAB, configure the format of the RADIUS UserName attribute
sent in the RADIUS Access-Request using the mab request format
command.
Command History
Updated syntax in version 6.5 Updated syntax in version 6.6 firmware.
Example
The following example sets MAC Authentication Bypass on interface
gigabitethernet 1/0/2:
console(config-if-Gi1/0/2)#authentication port-control auto
console(config-if-Gi1/0/2)#mab
password (AAA IAS User Configuration)
Use the password command in aaa IAS User Configuration mode to configure
a password for an IAS user. The password is composed of up to 64
alphanumeric characters. An optional parameter [encrypted] is provided to
indicate that the password given to the command is already pre-encrypted. To
clear the user’s password, use the no form of this command.
Syntax
password password [encrypted]
no password
•
password — Password for this level. (Range: 1- 64 characters)