Formatting A Mac Authentication Bypass Username And Password - Cisco Catalyst 2960-XR Security Configuration Manual

Configuring IEEE 802.1x Port-Based Authentication
Command or Action
Step 2
interface interface-id
Example:
Switch(config)# interface gigabitethernet2/0/1
Step 3 authentication port-control auto
Example:
Switch(config-if)# authentication port-control
auto
Step 4 mab [eap]
Example:
Switch(config-if)# mab
Step 5 end
Example:
Switch(config-if)# end

Formatting a MAC Authentication Bypass Username and Password

Use the optional mab request format command to format the MAB username and password in a style accepted
by the authentication server. The username and password are usually the MAC address of the client. Some
authentication server configurations require the password to be different from the username.
Beginning in privileged EXEC mode, follow these steps to format MAC authentication bypass username and
passwords.
SUMMARY STEPS
1. configure terminal
2. mab request format attribute 1 groupsize {1 | 2 | 4 |12} [separator {- | : | .} {lowercase | uppercase}]
3. mab request format attribute2 {0 | 7} text
4. end
OL-29434-01
Purpose
Specifies the port to be configured, and enter interface
configuration mode.
Enables 802.1x authentication on the port.
Enables MAC authentication bypass.
(Optional) Use the eap keyword to configure the switch
to use EAP for authorization.
Returns to privileged EXEC mode.
Catalyst 2960-XR Switch Security Configuration Guide, Cisco IOS Release 15.0(2)EX1
Configuring MAC Authentication Bypass
279