Configuration Guide User guide

BigIron RX Series Configuration Guide 1065
53-1002484-04
Displaying 802.1x information
34
Syntax: show dot1x
The following table describes the information displayed by the show dot1x command.
TABLE 172 Output from the show dot1x command
This field... Displays...
PAE Capability The Port Access Entity (PAE) role for the BigIron RX device. This is always
“Authenticator Only”.
system-auth-control Whether system authentication control is enabled on the device. The
dot1x-enable command enables system authentication control on the
device.
Number of ports enabled Number of interfaces on the devices that have been enabled for 802.1x.
re-authentication Whether periodic re-authentication is enabled on the device. Refer to
“Configuring periodic re-authentication” on page 1060.
When periodic re-authentication is enabled, the device automatically
re-authenticates Clients every 3,600 seconds by default.
global-filter-strict-security Whether or not strict security mode is enabled globally.
global-filter-strict-security: Whether strict security mode is enabled or disabled globally. See
“Disabling and enabling strict security mode for dynamic filter
assignment” on page 1056.
quiet-period When the BigIron RX is unable to authenticate a Client, the amount of
time the BigIron RX waits before trying again (default 60 seconds).
Refer to “Setting the quiet period” on page 1061 for information on how
to change this setting.
tx-period When a Client does not send back an EAP-response/identity frame, the
amount of time the BigIron RX waits before retransmitting the
EAP-request/identity frame to a Client (default 30 seconds).
Refer to “Setting the interval for retransmission of EAP-request/ identity
frames” on page 1061 for information on how to change this setting.
supp-timeout When a Client does not respond to an EAP-request frame, the amount of
time before the BigIron RX retransmits the frame.
Refer to “Specifying a timeout for retransmission of EAP-request frames
to the client” on page 1062 for information on how to change this
setting.
BigIron RX# show dot1x
PAE Capability : Authenticator Only
system-auth-control : Enable
Number of ports enabled : 25
re-authentication : Disable
global-filter-strict-security: Enable
quiet-period : 60 Seconds
tx-period : 30 Seconds
supptimeout : 30 Seconds
servertimeout : 30 Seconds
maxreq : 3
re-authperiod : 3600 Seconds
Protocol Version : 1
auth-fail-action : Block Traffic
MAC Session Aging : All
MAC Session Max Age : 120 Seconds
Maximum Failed Attempts : 3