Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Community Member

External RADIUS attributes for MAC authentication

Hi all,

We have a 1231 AP and a Freeradius Server.

Now we are using MAc authentication.

The thing is that the AP sends two parameters to the RADIUS:

User-Name = "000ff855df2e"

User-Password = "000ff855df2e"

both are the MAC of the wireless client.

I want that the AP send:

User-Name = "00-0f-f8-55-df-2e"

User-Password = "mykey"

Note that the MAC is dash separated and

the passwod is forced to the key that I want.

Thank you

2 REPLIES
Community Member

Re: External RADIUS attributes for MAC authentication

The MAC addresss parameters sent by the AP have limited format. Both the user name and password have to be the same. However, the format can be configured via the CLI as shown here.

AP(config)#dot11 aaa csid ?

default format ex: 0000.4096.3e4a

ietf format ex: 00-00-40-96-3e-4a

unformatted format ex: 000040963e4a

Community Member

External RADIUS attributes for MAC authentication

It does not work becuase the command does not change user-name attribute format.  I wonder if someone has found an answer for this, because I have the very same problem.

425
Views
0
Helpful
2
Replies
CreatePlease to create content