Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Community Member

Radius user-name attribute format trouble with ACS

Hi there:

  We have ACS 5.3 and Wireless Lan Controllers.  We are  doing MAC authentication for wireless clients. When MAC authentication was implemented for  WLC, the format chosen for users was XX-XX-XX-XX-XX-XX.  This has been working perfectly, but now we need to integrate some autonomous AP to ACS and problems has raised.

  At initial tests we found that with the format we are using for users in ACS, authentication does not work. We did some traffic captures and found that Radius user-name attribute format was XXXXXXXXXXXX  (no dots or dashes between MAC Address).

We also realized that through AP Web interface you are able to change the format for Called-Station-ID and Calling--Station-ID attributes, but changing these has no effect in user-name attribute.

   So we are wondering if there is a way, probably in CLI, to change the format od user-name attribute, so AP sends it like XX-XX-XX-XX-XX-XX instead of XXXXXXXXXXXX.

   Thanks a lot.

Everyone's tags (3)
2 REPLIES
Cisco Employee

Radius user-name attribute format trouble with ACS

so let me understand the issue here. the WLC and AP send the same mac address in different formats?

i am pretty sure you must have done this already but did u see the ACS auth failures to see what format the acs is expecting? i am not sure but i hv seen acs expecting xxxx.xxxx.xxxx as well.

Community Member

Radius user-name attribute format trouble with ACS

I am sure I answered this a couple of weeks ago, but it looks like the thread was not updated.

AP and WLC send user-name attribiute with different format. WLC uses XX-XX-XX-XX-XX-XX format and AP uses XXXXXXXXXXXX.

In AP configurarion I am able to change the format for Called-Station-ID and Calling-Station-ID formats, but changing those  don't affect the format of user-name field.

Thank a lot.

1037
Views
0
Helpful
2
Replies
CreatePlease to create content