CLI Guide

Security Commands 1069
Command History
Syntax updated in version 6.6 firmware.
default mab
Use the default mab command to configure the switch to transmit EAP or
CHAP or PAP credentials to the RADIUS server for MAB-authenticated
devices connected to the interface. Use the no form of the command to set
the protocol to the default.
Syntax
default mab [eap|chap|pap]
no default mab
• eap—Use EAP Message Digest 5 authentication.
• chap—Use Challenge Handshake Authentication Protocol.
• pap—Use Password Authentication Protocol.
Default Configuration
The default protocol is EAP-MD5.
Command Mode
Interface Configuration (Ethernet) mode
User Guidelines
This command configures the RADIUS authentication protocol used for
MAB devices connected to the interface.
CHAP and PAP are not supported for TACACS authentication.
The switch sends the following information to the RADIUS server for CHAP
Access-Requests:
1–User-Name—MAC address of MAB device.
3–CHAP-Password = Encrypted User Name.
4–NAS-IP-Address—IP address of the switch.
5–NAS-Port—Our internal port number.