topic Radius-attribute 31 difference in configuration in Network Access Control

Radius-attribute 31 difference in configuration

milos_p — Thu, 14 Oct 2021 07:21:20 GMT

Hi guys,

Does anybody knows practical difference between:

1. radius-server attribute 31 send nas-port-detail

and

2. radius-server attribute 31 send nas-port-detail mac-only

Am I going to have some difference in ISE logs between those two commands?

Thanks,

Milos

Re: Radius-attribute 31 difference in configuration

balaji.bandi — Thu, 14 Oct 2021 09:59:41 GMT

here is self explanatory :

radius-server attribute 31

To configure Calling-Station-ID (attribute 31) options, use the radius-server attribute 31command in global configuration mode. To disable the Calling-Station-ID (attribute 31) options, use the no form of this command.

radius-server attribute 31 { append-circuit-id | mac format { default | ietf | unformatted } | remote-id | send nas-port-detail [mac-only] }

no radius-server attribute 31 { append-circuit-id | mac format { default | ietf | unformatted } | remote-id | send nas-port-detail [mac-only] }

Syntax Description

append-circuit-id	Appends the PPPoE tag circuit-id and the nas-port-id to the calling-station-id.
mac format	Specifies the format of the MAC address in the Calling Station ID. Select one of the following three options: default (Example: 0000.4096.3e4a) ietf (Example: 00-00-40-96-3E-4A) unformatted (Example: 000040963e4a)
remote-id	Sends the remote ID as the Calling Station ID in the accounting records and access requests.
send nas-port-detail	Includes all NAS port details in the Calling Station ID.
mac-only	(Optional) Includes the MAC address only, if available, in the Calling Station ID.

reference :

https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/security/m1/sec-m1-cr-book/sec-cr-r1.html#wp3424534504

Re: Radius-attribute 31 difference in configuration

milos_p — Thu, 14 Oct 2021 13:43:08 GMT

Hi,

I have seen this, as well as in many other sites.

Does anyone knows practically what it will do, with and without "mac-only" parameter?

Regards,

Milos

Re: Radius-attribute 31 difference in configuration

milos_p — Fri, 15 Oct 2021 08:16:47 GMT

Well, in the end I tested it.

With mac-only, only MAC address of the endpoint is being seen in the logs.

Without mac-only, I can see IP address as well.

Regards,

Milos