We are planning to use a Nexus 6001 as an access switch and would like to use mac-authentication-bypass for that. This switch unfortunately sends all mab authentication data in upper case. Our other existing ios based Cisco switches send all their mab authentication data in lower case. I was hoping to change this format by using something like with ios: "mab request format attribute ..... ..... .....". But i can't find anything about this in the available Nexus documentation. How can i change the request format attributes on a Nexus 6001?
If you are using ISE as your AAA server you can simply reference the 'Calling Station ID' radius condition in your auth policies. If you look at your live logs this always shows the endpoint MAC in CAPS. It is radius attribute 31. If you can drive policy utilizing this condition then you can ignore the issue of attempting to change the format on your nexus switch. HTH!
If you are using ISE as your AAA server you can simply reference the 'Calling Station ID' radius condition in your auth policies. If you look at your live logs this always shows the endpoint MAC in CAPS. It is radius attribute 31. If you can drive policy utilizing this condition then you can ignore the issue of attempting to change the format on your nexus switch. HTH!
Try this command to change the radius attribute 31 format to lower case.
radius-server attribute 31 mac format ietf lower-case
-Aravind
Getting Started
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:
