Security: 802.1X Authentication
MAC-Based Authentication Settings
376 Cisco 350, 350X and 550X Series Managed Switches, Firmware Release 2.4, ver 0.4
18
- EAP—Use RADIUS with EAP encapsulation for the traffic between the switch
(RADIUS client) and the RADIUS server, which authenticates a MAC-based
supplicant.
- RADIUS—Use RADIUS without EAP encapsulation for the traffic between the
switch (RADIUS client) and the RADIUS server, which authenticates a MAC-based
supplicant.
Username Format
In MAC-based authentication, the supplicant's username is based on the supplicant device
MAC address. The following defines the format of this MAC-based username, which is sent
from the switch to the RADIUS server, as part of the authentication process.
• Group Size—Number of ASCII characters between delimiters of the MAC address sent
as a user name.
• Group Separator—Character used as a delimiter between the defined groups of
characters in the MAC address.
• Case—Send user name in lower or upper case.
MAC Authentication Password
• Password—Defines the password that the switch will use for authentication via the
RADIUS server. Select one of the following options:
- Use default (Username)—Select this to use the defined username as the password.
- Encrypted—Define a password in encrypted format.
- Plaintext—Define a password in plaintext format.
• Password MD5 Digest—Displays the MD5 Digest password.
STEP 3 Click Apply and the settings are saved to the Running Configuration file.