Switching Commands
87
ProSafe Managed Switch
The
show dot1x detail <unit/slot/port>
command will display the following
MAC-based dot1x fields if the port-control mode for that specific port is MAC-based. For each
client authenticated on the port, the
show dot1x detail <unit/slot/port>
command will
display the following MAC-based dot1x parameters if the port-control mode for that specific
port is MAC-based.
Supplicant
MAC-Address
Authenticator
PAE State
Backend
Authentication
State
VLAN-Assigned
Logical Port
Reauthentication
Period
The timer used by the authenticator state machine on this port to determine when
reauthentication of the supplicant takes place. The value is expressed in seconds and
will be in the range of 1 and 65535.
Reauthentication
Enabled
Indicates if reauthentication is enabled on this port. Possible values are ‘True” or
“False”.
Key
Transmission
Enabled
Indicates if the key is transmitted to the supplicant for the specified port. Possible values
are True or False.
Control Direction
The control direction for the specified port or ports. Possible values are both or in.
Maximum Users
The maximum number of clients that can get authenticated on the port in the
MAC-based dot1x authentication mode. This value is used only when the port control
mode is not MAC-based.
Unauthenticated
VLAN ID
Indicates the unauthenticated VLAN configured for this port. This value is valid for the
port only when the port control mode is not MAC-based.
Session Timeout
Indicates the time for which the given session is valid. The time period in seconds is
returned by the RADIUS server on authentication of the port. This value is valid for the
port only when the port control mode is not MAC-based.
Session
Termination
Action
This value indicates the action to be taken once the session timeout expires. Possible
values are Default, Radius-Request. If the value is Default, the session is terminated
the port goes into unauthorized state. If the value is Radius-Request, then a
reauthentication of the client authenticated on the port is performed. This value is valid
for the port only when the port control mode is not MAC-based.
Term
Definition
The MAC-address of the supplicant.
Current state of the authenticator PAE state machine. Possible values are Initialize,
Disconnected, Connecting, Authenticating, Authenticated, Aborting, Held,
ForceAuthorized, and ForceUnauthorized.
Current state of the backend authentication state machine. Possible values are Request,
Response, Success, Fail, Timeout, Idle, and Initialize.
The VLAN assigned to the client by the radius server.
The logical port number associated with the client.
Term
Definition
