Controller-less WLANs

Configurable RADIUS packet format in IAP

Environment- This article is applicable on IAP running 4.1.1.0

Answer- Before IAP 4.1.1.0:
Mac address delimiter and case configuration was only allowed when MAC authentication was enabled
“User-Name” & “User-Password” were the only supported radius attributes

In 4.1.1.0:
Delimiter and case configuration is allowed for all authentication methods
Any radius attribute in Mac-address-format, such as calling-station-id, called-station-id will honor the new delimiter and case configuration

These commands are only available in CLI.
    
    configure terminal
    wlan ssid-profile <ssid>
     auth-pkt-mac-format delimiter :  
    (auth-pkt-mac-format upper-case delimiter -)
    end
    commit apply

“auth-pkt-mac-format delimiter :” means use colon for mac address delimiter.
“auth-pkt-mac-format upper-case delimiter -” means mac address is upper-case and delimiter is minus.


Before 4.1.1.0, there are 2 separate commands only for mac auth username and password.
    mac-authentication-delimiter           
    mac-authentication-upper-case  

In 4.1.1.0, a new command has been added       
    auth-pkt-mac-format { upper-case } { delimiter <delim> }

The two commands mac-authentication-delimiter & mac-authentication-upper-case have higher priority.  
Default format: lower case, no delimiter

Note:
This feature is not supported in accounting packets.

rtaImage (25).png

 

 

Related Links- https://arubanetworkskb.secure.force.com/pkb/articles/FAQ/Configurable-Address-Format-for-MAC-authentication-in-IAP

Version history
Revision #:
1 of 1
Last update:
‎04-05-2015 10:25 PM
Updated by:
 
Labels (1)
Contributors
Search Airheads
Showing results for 
Search instead for 
Did you mean: 
Is this a frequent problem?

Request an official Aruba knowledge base article to be written by our experts.