PurposeCommand or Action
Specifies the format of the MAC address in the User-Name attribute of
MAB-generated Access-Request packets.
mab request format attribute 1 groupsize
{1 | 2 | 4 |12} [separator {- | : | .}
{lowercase | uppercase}]
Step 2
1—Sets the username format of the 12 hex digits of the MAC address.
Example:
Switch(config)# mab request format
group size—The number of hex nibbles to concatenate before insertion of a
separator. A valid groupsize must be either 1, 2, 4, or 12.
separator—The character that separates the hex nibbles according to group
size. A valid separator must be either a hyphen, colon, or period. No separator
is used for a group size of 12.
attribute 1 groupsize 12
{lowercase | uppercase}—Specifies if nonnumeric hex nibbles should be in
lowercase or uppercase.
2—Specifies a custom (nondefault) value for the User-Password attribute in
MAB-generated Access-Request packets.
mab request format attribute2 {0 | 7} text
Example:
Switch(config)# mab request format
Step 3
0—Specifies a cleartext password to follow.
7—Specifies an encrypted password to follow.
attribute 2 7 A02f44E18B12
text—Specifies the password to be used in the User-Password attribute.
When you send configuration information in e-mail, remove type 7
password information. The show tech-support command removes
this information from its output by default.
Note
Returns to privileged EXEC mode.end
Example:
Switch(config)# end
Step 4
Configuring 802.1x User Distribution
Beginning in privileged EXEC mode, follow these steps to configure a VLAN group and to map a VLAN to
it:
SUMMARY STEPS
1.
configure terminal
2.
vlan group vlan-group-name vlan-list vlan-list
3.
end
4.
no vlan group vlan-group-name vlan-list vlan-list
Catalyst 2960-X Switch Security Configuration Guide, Cisco IOS Release 15.0(2)EX
OL-29048-01 335
Configuring IEEE 802.1x Port-Based Authentication
Configuring 802.1x User Distribution
To Next Page
Loading...
Need help?
General