Technical Tip: How to modify MAC format for MAB on FortiSwitch

[zendodg]

Description	This article describes how to modify a MAC format that is sent to the RADIUS server when authenticating with a MAC-Authentication setup.
Scope	FortiSwitch authenticates clients with MAB on FortiSwitch v7.4.1 and above.
Solution	By default, when authenticating on Fortiswitch with MAB, the MAC address is going to be sent to RADIUS in the format xx-xx-xx-xx-xx-xx (lowercase): To change the way FortiSwitches send MAC addresses of end devices to the RADIUS server, use the following commands: config switch global config port-security set mac-username-delimiter  [ hyphen / single-hyphen / colon / none } set mac-password-delimiter [ hyphen / single-hyphen / colon / none ] set mac-case [ uppercase / *lowercase ] end end In this example, the MAC format is going to change from xx-xx-xx-xx-xx-xx to XX:XX:XX:XX:XX:XX. config switch global config port-security set mac-case uppercase set mac-password-delimiter colon set mac-username-delimiter colon end end Caller station ID can be modified in the same way that MAC format with the next commands: config switch global     config port-security         set mac-calling-station-delimiter { *hyphen | single-hyphen | colon | none }         set mac-called-station-delimiter { *hyphen | single-hyphen | colon | none }     end end