Administrator Guide

Security Commands 944
User Guidelines
Use this command to override the format of MAC addresses sent in the
Calling-Station-Id (attribute 31) for authentication Access-Requests for ports
configured for MAC based 802.1x authentication.
This command is only supported for 802.1X authentication.
This command does not override the per RADIUS server configuration for
attribute 31. Use the mab request format command to configure formatting
the User-Name attribute.
Command History
Introduced in version 6.3.0.1 firmware. Updated in release 6.5.1 to remove
formatting of the User-Name attribute.
Example
This example globally configures the format of the MAC address sent in the
Calling-Station-Id attribute when using MAC based authentication to IETF
lower case. It also configures interface Gi1/0/1 to use MAB. MAB must be
configured on the switch in an active authentication list, IEEE 802.1X must
be configured, and a RADIUS server must also be configured.
console(config)#radius server attribute 31 mac format ietf lower-case
console(config)#interface gi1/0/1
console(config-if-Gi1/0/1)#dot1x port-control mac-based
console(config-if-Gi1/0/1)#mab
radius server deadtime
Use the radius server deadtime command to configure the minimum amount
of time to wait before attempting to recontact an unresponsive RADIUS
server. To set the deadtime to 0, use the no form of this command.
Syntax
radius server deadtime deadtime
no radius server deadtime