cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
744
Views
0
Helpful
2
Replies

External RADIUS attributes for MAC authentication

joan.porta
Level 1
Level 1

Hi all,

We have a 1231 AP and a Freeradius Server.

Now we are using MAc authentication.

The thing is that the AP sends two parameters to the RADIUS:

User-Name = "000ff855df2e"

User-Password = "000ff855df2e"

both are the MAC of the wireless client.

I want that the AP send:

User-Name = "00-0f-f8-55-df-2e"

User-Password = "mykey"

Note that the MAC is dash separated and

the passwod is forced to the key that I want.

Thank you

2 Replies 2

gmercuri
Level 1
Level 1

The MAC addresss parameters sent by the AP have limited format. Both the user name and password have to be the same. However, the format can be configured via the CLI as shown here.

AP(config)#dot11 aaa csid ?

default format ex: 0000.4096.3e4a

ietf format ex: 00-00-40-96-3e-4a

unformatted format ex: 000040963e4a

It does not work becuase the command does not change user-name attribute format.  I wonder if someone has found an answer for this, because I have the very same problem.

Review Cisco Networking for a $25 gift card