CLI Guide

Security Commands 1030
This command is only supported for 802.1X authentication. Local
authentication formats remain unchanged.
This command does not override the per RADIUS server configuration for
attribute 31. Use the mab request format command to configure formatting
the User-Name attribute.
Command History
Introduced in version 6.3.0.1 firmware. Updated in release 6.5.0 to remove
formatting of the User-Name attribute. Updated in release 6.6.0 to add
formatting of attributes 30 and 31.
Example
This example globally configures the format of the MAC address sent in the
Calling-Station-Id attribute to IETF lower case. It also configures interface
Gi1/0/1 to use MAB. For this command to have any affect, MAB must be
configured on the switch in an active authentication list, IEEE 802.1X must
be configured, and a RADIUS server must also be configured.
console(config)#radius server attribute 31 mac format ietf lower-case
console(config)#interface gi1/0/1
console(config-if-Gi1/0/1)#dot1x port-control multi-auth
console(config-if-Gi1/0/1)#mab
radius server attribute 168
Use the radius server attribute 168 include-in-access-req command to enable
the switch to send the RADIUS Framed-IPv6-Address attribute in Access-
Request messages sent to the RADIUS authentication server.
Syntax
radius server attribute 168 include-in-access-req
no radius server attribute 168 include-in-access-req
Default Configuration
By default, RADIUS attribute 168 is not sent.