Users Guide

362 Authentication, Authorization, and Accounting

View 802.1X information about Port 8.

console#show dot1x interface Gi1/0/8

Administrative Mode............... Enabled

Dynamic VLAN Creation Mode........ Enabled

VLAN Assignment Mode.............. Disabled

Monitor Mode...................... Disabled

Port Admin Oper Reauth Reauth

Mode Mode Control Period

------- ---------------- ------------ -------- ----------

Gi1/0/8 mac-based Authorized FALSE 3600

Quiet Period................................... 60

Transmit Period................................ 30

Maximum Request-Identities..................... 2

Maximum Requests............................... 2

Max Users...................................... 2

VLAN Assigned.................................. 1 (Default)

Supplicant Timeout............................. 30

Guest-vlan Timeout............................. 90

Server Timeout (secs).......................... 30

MAB mode (configured).......................... Disabled

MAB mode (operational)......................... Disabled

MAB Protocol................................... EAP

Authentication Server Dead action for Voice.... None

Authentication Server Alive action............. None

Authenticator PAE State........................ Initialize

Backend Authentication State................... Idle

Controlling Authentication-Based VLAN Assignment

The network in this example uses three VLANs to control access to network

resources. When a client connects to the network, it is assigned to a particular

VLAN based on one of the following events:

• It attempts to contact the 802.1X server and is authenticated.

• It attempts to contact the 802.1X server and fails to authenticate.

• It does not attempt to contact the 802.1X server.

The following table describes the three VLANs:

VLAN ID VLAN Name VLAN Purpose

100 Authorized Data from authorized clients