CLI Guide

Security Commands 1025
Example
This command configures the switch to send the Service-Type attribute in the
Access-Request message sent to the RADIUS server.
console#conf
console(config)#radius server attribute 6 on-for-login-auth
radius server attribute 8
Use the radius server attribute 8 include-in-access-req command to enable
the switch to send the RADIUS Framed-IP-Address attribute in Access-
Request messages sent to the authentication server.
Syntax
radius server attribute 8 include-in-access-req
no radius server attribute 8 include-in-access-req
Default Configuration
By default, RADIUS attribute 8 is not sent.
Command Mode
Global Configuration
User Guidelines
If accounting is enabled and the address is available to the switch, the switch
will send the IPv4 address in the Access-Request, Acct-Start/Acct-
Interim/Acct-Stop messages sent to the RADIUS server.
The switch discovers the client IPv4 address via its inclusion in the RADIUS
Access-Accept, via DHCPv4 snooping. DHCPv4 snooping must be enabled
for the switch to discover a host IPv4 prefix via DHCP.
After an Access-Accept has been received by the switch and the switch grants
the host access to the network, it may take a few seconds before the DHCP
transaction completes. Use the aaa accounting delay-start command to delay
the sending of the Acct-Start packet to the accounting server. Accounting
packets are not sent for ports placed in the Guest VLAN. Multiple hosts are
allowed access on a port configured in 802.1x multi-domain-multi-host mode
which is placed in the Guest VLAN.