Configuration Guide User guide

FastIron Configuration Guide 1821
53-1002494-02
Displaying 802.1X information
Displaying 802.1X information
You can display the following 802.1X-related information:
• The 802.1X configuration on the device and on individual ports
• Statistics about the EAPOL frames passing through the device
• 802.1X-enabled ports dynamically assigned to a VLAN
• User-defined and dynamically applied MAC address filters and IP ACLs currently active on the
device
• The 802.1X multiple-host configuration
Displaying 802.1X configuration information
To display information about the 802.1X configuration on the Brocade device, enter the show dot1x
command.
Syntax: show dot1x
The following table describes the information displayed by the show dot1x command.
TABLE 296 Output from the show dot1x command
Field Description
PAE Capability The Port Access Entity (PAE) role for the Brocade device. This is always
“Authenticator Only”.
system-auth-control Whether system authentication control is enabled on the device. The
dot1x-enable command enables system authentication control on the device.
re-authentication Whether periodic re-authentication is enabled on the device. Refer to
“Configuring periodic re-authentication” on page 1811.
When periodic re-authentication is enabled, the device automatically
re-authenticates Clients every 3,600 seconds by default.
global-filter-strict-security Whether strict security mode is enabled or disabled globally. Refer to “Disabling
and enabling strict security mode for dynamic filter assignment” on page 1807.
quiet-period When the Brocade device is unable to authenticate a Client, the amount of time
the Brocade device waits before trying again (default 60 seconds).
Refer to “Setting the quiet period” on page 1812 for information on how to
change this setting.
Brocade#show dot1x
PAE Capability: Authenticator Only
system-auth-control: Enable
re-authentication: Disable
global-filter-strict-security: Enable
quiet-period: 60 Seconds
tx-period: 30 Seconds
supptimeout: 30 Seconds
servertimeout: 30 Seconds
maxreq: 2
re-authperiod: 3600 Seconds
Protocol Version: 1