Security: 802.1X Authentication
MAC-Based Authentication Settings
376
Cisco 350, 350X and 550X Series Managed Switches, Firmware Release 2.4, ver 0.4
18
-
EAP—Use RADIUS with EAP encapsulation for the traffic between the switch
(RADIUS client) and the RADIUS server, which authenticates a MAC-based
supplicant.
-
RADIUS—Use RADIUS without EAP encapsulation for the traffic between the
switch (RADIUS client) and the RADIUS server, which authenticates a MAC-based
supplicant.
Username Format
In MAC-based authentication, the supplicant's username is based on the supplicant device
MAC address. The following defines the format of this MAC-based username, which is sent
from the switch to the RADIUS server, as part of the authentication process.
•
Group Size
—Number of ASCII characters between delimiters of the MAC address sent
as a user name.
•
Group Separator
—Character used as a delimiter between the defined groups of
characters in the MAC address.
•
Case
—Send user name in lower or upper case.
MAC Authentication Password
•
Password
—Defines the password that the switch will use for authentication via the
RADIUS server. Select one of the following options:
-
Use default (Username)
—Select this to use the defined username as the password.
-
Encrypted
—Define a password in encrypted format.
-
Plaintext
—Define a password in plaintext format.
•
Password MD5 Digest
—Displays the MD5 Digest password.
STEP 3
Click
Apply
and the settings are saved to the Running Configuration file.
