Configuring the Format of the RADIUS Password Attribute when Authenticating NEAP MAC Addresses using RADIUS

Use the following procedure to configure the format of the RADIUS password when authenticating NEAP MAC addresses using RADIUS.

Procedure

Enter Global Configuration mode:

enable

configure terminal
Configure the RADUIS password format:

eapol multihost non-eap-pwd-fmt {[ip-addr] [key WORD<1-32>] [mac-addr] [padding] [port-number]}

Variable Definitions

The following table defines parameters for the eapol multihost non-eap-pwd-fmt command.


Variable	Value
ip-addr	Management ip-address of the switch.
key WORD<1-32>	Key value used for non-eap password format.
mac-addr	Mac-Address of the client.
padding	Includes a dot in the RADIUS password for every missing parameter.
port-number	Index of the port on which MAC is received.

Note

To derive the port number for an interface, use the command show interfaces gigabit [{slot/port[/sub-port][-slot/port[/sub-port]][,...]}] .

If you configure interface 1/6 on the product, to derive the port-number for this interface, use the command show interfaces gigabitEthernet 1/6. From this command, you can ascertain that port number used in the NEAP password is 197.

Switch:1(config)# show interfaces gigabitEthernet 1/6

==========================================================================================
                                      Port Interface
==========================================================================================
PORT                            LINK  PORT           PHYSICAL          STATUS
NUM      INDEX DESCRIPTION      TRAP  LOCK     MTU   ADDRESS           ADMIN  OPERATE
------------------------------------------------------------------------------------------
1/6      197   1000BaseTX       true  false    1950  f8:15:47:e1:dd:05 up     up