Specifications

DES-1228/ME Layer 2 Metro Ethernet Switch CLI Reference Manual
153
show 802.1x auth_configuration
Purpose Used to display the current configuration of the 802.1X server on the Switch.
Syntax
show 802.1x auth_configuration {ports <auth_portlist>}
Description
The show 802.1x auth_configuration command is used to display the 802.1X Port-
based or Host-based Network Access control local users currently configured on the
Switch.
Parameters
ports <auth_portlist> − Specifies a port or range of ports to view.
The following details are displayed:
802.1x Enabled / Disabled − Shows the current status of 802.1X functions on the Switch.
Authentication Mode – Shows the authentication mode, whether it be by MAC address or
by port.
Authentication Protocol − Shows the authentication protocol suite in use between the
Switch and a RADIUS server. May read Radius_Eap or local.
Port number − Shows the physical port number on the Switch.
Capability: Authenticator/None − Shows the capability of 802.1X functions on the port
number displayed above. There are two 802.1X capabilities that can be set on the Switch:
Authenticator and None.
AdminCtlDir: Both / In − Shows whether a controlled Port that is unauthorized will exert
control over communication in both receiving and transmitting directions, or just the
receiving direction.
OpenCtlDir: Both / In − Shows whether a controlled Port that is unauthorized will exert
control over communication in both receiving and transmitting directions, or just the
receiving direction.
Port Control: ForceAuth / ForceUnauth / Auto − Shows the administrative control over the
port’s authorization status. ForceAuth forces the Authenticator of the port to become
Authorized. ForceUnauth forces the port to become Unauthorized.
QuietPeriod − This is the initialization value of the quiet period timer. The default value is
60s and can be any value between 0-65535.
TxPeriod − This us the initialization value of the tx timer. The default value is 30s and can
be any value between 1-65535.
SuppTimeout − Shows the time to wait for a response from a supplicant (user) for all EAP
packets, except for the Request / Identity packets.
ServerTimeout − Shows the length of time to wait for a response from a RADIUS server.
MaxReq − Shows the maximum number of times to retry sending packets to the
supplicant.
ReAuthPeriod − Shows the time interval between successive re-authentications.
ReAuthenticate: Enabled / Disabled − Shows whether or not to re-authenticate.
Restrictions None.
Example usage:
To display the 802.1X authentication states:
DES-1228/ME:4#show 802.1x auth_configuration ports 1
Command: show 802.1x auth_configuration ports 1
802.1X : Enabled
Authentication Mode : Port_based
Authentication Protocol : Radius_EAP