CLI Guide

Security Commands 961
Authentication of a user via MAB will not occur until the dot1x time-out
guest-vlan-period timer expires.
When using MAB, configure the format of the RADIUS UserName attribute
sent in the RADIUS Access-Request using the mab request format
command.
Command History
Updated syntax in version 6.5 Updated syntax in version 6.6 firmware.
Example
The following example sets MAC Authentication Bypass on interface
gigabitethernet 1/0/2:
console(config-if-Gi1/0/2)#authentication port-control auto
console(config-if-Gi1/0/2)#mab
password (AAA IAS User Configuration)
Use the password command in aaa IAS User Configuration mode to configure
a password for an IAS user. The password is composed of up to 64
alphanumeric characters. An optional parameter [encrypted] is provided to
indicate that the password given to the command is already pre-encrypted. To
clear the user’s password, use the no form of this command.
Syntax
password password [encrypted]
no password
• password — Password for this level. (Range: 1- 64 characters)
• encrypted — Encrypted password to be entered, copied from another
switch configuration.
Default Configuration
This command has no default configuration.
Command Mode
AAA IAS User Configuration