Administrator Guide

Security Commands 931
This command overrides the global configuration for attribute 31 (Calling-
Station-ID). Use the mab request format command to control the formatting
of the User-Name (1) attribute.
Command History
Introduced in version 6.3.0.1 firmware. Description update in release 6.5.0 to
remove the User-Name formatting control.
Example
This example configures the format of the MAC address sent in MAC based
authentication to IETF lower case for the RADIUS server at address 1.2.3.4.
MAB must be configured on the switch in an active authentication list, IEEE
802.1X must be configured, and a RADIUS server must also be configured.
console(config)#radius server auth 1.2.3.4
console(config-auth-radius)# attribute 31 mac format ietf lower-case
authentication event fail retry
Use the authentication event fail retry command to select the number of
times authentication is reattempted by the user for an IEEE 802.1X
supplicant. Use the no form of the command to return the number of
maximum attempts to the default value.
Syntax
authentication event fail retry max-attempts
no authentication event fail retry
• max-attempts — The number of times RADIUS authentication is allowed
to fail before failing the authentication and moving to the next
authentication method. Default 1. Range 1–5.
Default Configuration
By default, the number of failed authentication attempts is 1. An
authentication failure is declared failed after a single authentication attempt
and the next authentication method is attempted.