Configuration Guide User guide

BigIron RX Series Configuration Guide 1071
53-1002484-04
Displaying 802.1x information
34
Syntax: show dot1x mac-session [brief | [begin <expression> | exclude <expression> | include
<expression>]]
Table 175 describes the information displayed by the show dot1x mac-session command.
Displaying information about the ports in an 802.1x multiple client configuration
To display information about the ports in an 802.1x multiple client configuration, enter the
following command.
TABLE 175 Output from the show dot1x mac-session command
This field... Displays...
Port The port on which the dot1x-mac-session exists.
MAC The MAC address of the Client
Username The username used for RADIUS authentication.
Vlan The VLAN to which the port is currently assigned.
Auth-State The authentication state of the dot1x-mac-session. This can be one of
the following.
permit – The Client has been successfully authenticated, and traffic
from the Client is being forwarded normally.
blocked – Authentication failed for the Client, and traffic from the Client
is being dropped in hardware.
restricted – Authentication failed for the Client, but traffic from the Client
is allowed in the restricted VLAN only.
init - The Client is in is in the process of 802.1x authentication, or has
not started the authentication process.
ACL Whether or not an IP ACL is applied to incoming (i) and outgoing (o)
traffic on the interface
MAC Whether or not a MAC filter is applied to the port.
Age The software age of the dot1x-mac-session.
BigIron RX# show dot1x mac-session
Port MAC Username VLAN Auth State ACL|MAC Age
i|o|f
-------------------------------------------------------------------------------
1/1 0050.da0b.8cd7 Mary M 1 DENIED n|n|n 0
1/2 0050.da0b.8cb3 adminmorn 4094 PERMITTED y|n|n 0
1/3 0050.da0b.8bef reports 4094 PERMITTED y|n|n 0
1/4 0010.5a1f.6a63 testgroup 4094 PERMITTED y|n|n 0
1/5 0050.da1a.ff7e admineve 4094 PERMITTED y|n|n 0
BigIron RX# show dot1x mac-session brief
Port Number of users Dynamic Dynamic Dynamic
Restricted Authorized Total VLAN ACL(In/Out) MAC-Filt
---------+----------+----------+-----+-------+-----------+--------
1/1 0 0 1 no no/no no
1/2 0 1 1 yes yes/no no
1/3 0 1 1 yes yes/no no
1/4 0 1 1 yes yes/no no
1/5 0 1 1 yes yes/no no