Users Guide

Security Commands 1029
Example
This example globally configures the format of the MAC address sent in the
Calling-Station-Id attribute to IETF lower case. It also configures interface
Gi1/0/1 to use MAB. For this command to have any affect, MAB must be
configured on the switch in an active authentication list, IEEE 802.1X must
be configured, and a RADIUS server must also be configured.
console(config)#radius server attribute 31 mac format ietf lower-case
console(config)#interface gi1/0/1
console(config-if-Gi1/0/1)#dot1x port-control multi-auth
console(config-if-Gi1/0/1)#mab
radius server attribute 168
Use the radius server attribute 168 include-in-access-req command to enable
the switch to send the RADIUS Framed-IPv6-Address attribute in Access-
Request messages sent to the RADIUS authentication server.
Syntax
radius server attribute 168 include-in-access-req
no radius server attribute 168 include-in-access-req
Default Configuration
By default, RADIUS attribute 168 is not sent.
Command Mode
Global Configuration mode.
User Guidelines
The switch sends the IPv6 address of the host attempting to access the
network in the Framed-IPv6-Address attribute if it is available to the switch.
If accounting is enabled and the address is available to the switch, the switch
will send the IPv6 address in the Access-Request, Acct-Start/Acct-
Interim/Acct-Stop messages sent to the accounting server.
The switch discovers the client IPv6 address via its inclusion in the RADIUS
Access-Accept, or via DHCPv6 snooping. DHCPv6 snooping must be enabled
for the switch to discover a host IPv6 address.