Enhancements

Release M.10.39 Enhancements

ProCurve(config)# show authentication

Status and Counters - Authentication Information

Login Attempts : 3

Respect Privilege : Disabled

 

Login

Login

Enable

Enable

 

Access Task

Primary

Secondary

Primary

Secondary

 

----------- +

----------

----------

----------

----------

 

 

The access methods

Console

Local

None

Local

None

Telnet

Local

None

Local

None

with secondary

authentication

Port-Access

Local

Authorized

N/A

N/A

 

 

configured as authorized

 

Webui

Local

None

Local

None

allows the client access

SSH

Local

None

Local

None

to the network even if the

Web-Auth

ChapRadius

Authorized

N/A

N/A

RADIUS server is

MAC-Auth

ChapRadius

Authorized

N/A

N/A

unreachable.

Figure 12. Example of AAA Authentication Using Authorized for the Secondary Authentication Method

Specifying the MAC Address Format

The MAC address format command has been enhanced to allow upper-case letters to be used for the hexadecimal numbers when indicating the MAC address in RADIUS packets for MAC-based authen- tication.

Syntax: aaa port-access mac-based addr-format <no-delimiter single-dash multi-dash multi-colon no-delimiter-uppercase single-dash-uppercase multi-dash-uppercase multi-colon-uppercase>

Specifies the MAC address format to be used in the RADIUS request message. This format must match the format used to store the MAC addresses in the RADIUS server. (Default: no-delimiter)

no-delimiter— specifies an aabbccddeeff format. single-dash— specifies an aabbcc-ddeeff format. multi-dash— specifies an aa-bb-cc-dd-ee-ff format. multi-colon— specifies an aa:bb:cc:dd:ee:ff format.

no-delimiter-uppercase— specifies an AABBCCDDEEFF format. single-dash-uppercase— specifies an AABBCC-DDEEFF format multi-dash-uppercase— specifies an AA-BB-CC-DD-EE-FF format multi-colon-uppercase— specifies an AA:BB:CC:DD:EE:FF format.

For example, using the multi-colon-uppercase option, the MAC address would appear as follows:

AA:BB:CC:DD:EE:FF

123