KB.15.15

Table 52 Field table (continued)

DescriptionField

Period of time (in seconds) that the switch waits for a server response to an authentication

request.

Server Timeout

Direction in which flow of incoming and outgoing traffic is blocked on 802.1X-aware

port that has not yet entered the authenticated state: Both: Incoming and outgoing traffic

Cntrl Dir

is blocked on port until authentication occurs. In: Only incoming traffic is blocked on

port before authentication occurs. Outgoing traffic with unknown destination addresses

is flooded on the unauthenticated 802.1X-aware port.

Syntax

show port-access authenticator statistics [port-list]

Displays statistical information for all switch ports or specified ports that are enabled

as 802.1X authenticators, including:

• Whether port-access authentication is enabled

◦ Whether RADIUS-assigned dynamic VLANs are supported

◦ 802.1X supplicant’s MAC address as determined by the content of the

last EAPOL frame received on the port

◦ 802.1X traffic statistics from received and transmitted packets

802.1X configuration information for ports that are not enabled as an 802.1X

authenticators is not displayed

Figure 335 show port-access authenticator statistics Command

Syntax

show port-access authenticator session-counters [port-list]

Displays information for active 802.1X authentication sessions on all switch ports

or specified ports that are enabled as 802.1X authenticators, including:

• 802.1X frames received and transmitted on each port

• Duration and status of active 802.1X authentication sessions (in-progress or

terminated)

• User name of 802.1X supplicant included in 802.1X response packets,

configured with the aaa port-access supplicant identity <username> command

(see page 13-49).

802.1X configuration information for ports that are not enabled as an 802.1X

authenticators is not displayed.

Configuring Port-Based Access 469