Configuration Guide User guide

1064 BigIron RX Series Configuration Guide
53-1002484-04
Displaying 802.1x information
34
BigIron RX(config-dot1x)# auth-fail-max-attempts 2
Syntax: [no] auth-fail-max-attempts <attempts>
By default, the device makes 3 attempts to authenticate a Client before dropping packets from the
Client. You can specify between 1 – 10 authentication attempts.
Display commands
The show port security global-deny command lists all the configured global deny MAC addresses.
The show port security denied mac command lists all the denied MAC addresses in the system.
Clearing a dot1x-mac-session for a MAC address
You can clear the dot1x-mac-session for a specified MAC address, so that the Client with that MAC
address can be re-authenticated by the RADIUS server. For example,
BigIron RX# clear dot1x mac-session 00e0.1234.abd4
Syntax: clear dot1x mac-session <mac-address>
Displaying 802.1x information
You can display the following 802.1x-related information:
• Information about the 802.1x configuration on the device and on individual ports
• Statistics about the EAPOL frames passing through the device
• Information about 802.1x-enabled ports dynamically assigned to a VLAN
• Information about the user-defined and dynamically applied Mac address and IP ACLs
currently active on the device
• Information about the 802.1x multiple client configuration
Displaying 802.1x configuration information
To display information about the 802.1x configuration on the BigIron RX device, enter the following
command.