Cisco Catalyst 2960-XR - Configuring VLAN ID-Based MAC Authentication

PurposeCommand or Action
• use-svi—Uses the switch virtual interface (SVI) IP address as
source of ARP probes.
Configures the network access server to recognize and use
vendor-specific attributes.
radius-server vsa send authentication
Example:
Switch(config)# radius-server vsa send
Step 10
The downloadable ACL must be
operational.
Note
authentication
Returns to privileged EXEC mode.end
Example:
Switch(config)# end
Step 11
Configuring VLAN ID-based MAC Authentication
Beginning in privileged EXEC mode, follow these steps:
SUMMARY STEPS
1.
configure terminal
2.
mab request format attribute 32 vlan access-vlan
3.
copy running-config startup-config
DETAILED STEPS
PurposeCommand or Action
Enters global configuration mode.configure terminal
Example:
Switch# configure terminal
Step 1
Enables VLAN ID-based MAC authentication.mab request format attribute 32 vlan access-vlan
Example:
Switch(config)# mab request format attribute 32 vlan
Step 2
access-vlan
Catalyst 2960-XR Switch Security Configuration Guide, Cisco IOS Release 15.0(2)EX1
OL-29434-01 293
Configuring IEEE 802.1x Port-Based Authentication
Configuring VLAN ID-based MAC Authentication