Table 276: Port Access Control—Port Summary Fields
Field
Description
Interface
The interface associated with the rest of the data in the row.
PAE Capabilities
The Port Access Entity (PAE) role, which is one of the following:
•
Authenticator – The port enforces authentication and passes authentication
information from a remote supplicant (similar to a client or host) to the
authentication server. If the server successfully authenticates the supplicant,
the port allows access.
•
Supplicant – The port must be granted permission by the authentication
server before it can access the remote authenticator port.
Control Mode
The port-based access control mode configured on the port, which is one of the
following:
•
Auto – The port is unauthorized until a successful authentication exchange
has taken place.
•
Force Unauthorized – The port ignores supplicant authentication attempts
and does not provide authentication services to the client.
•
Force Authorized – The port sends and receives normal traffic without client
port-based authentication.
•
MAC-Based – This mode allows multiple supplicants connected to the same
port to each authenticate individually. Each host connected to the port must
authenticate separately in order to gain access to the network. The hosts are
distinguished by their MAC addresses.
Operating Control Mode
The control mode under which the port is actually operating, which is one of the
following:
•
Auto
•
Force Unauthorized
•
Force Authorized
•
MAC-Based
•
N/A
If the mode is N/A, port-based access control is not applicable to the port. If the
port is in detached state it cannot participate in port access control. Additionally,
if port-based access control is globally disabled, the status for all ports is N/A.
PAE State
The current state of the authenticator PAE state machine, which is the 802.1X
process that controls access to the port. The state can be one of the following:
•
Initialize
•
Disconnected
•
Connecting
•
Authenticating
•
Authenticated
•
Aborting
•
Held
•
ForceAuthorized
•
ForceUnauthorized
Managing Device Security
ExtremeSwitching 200 Series: Administration Guide
274
