DES-3000 Series Layer 2 Switch CLI Reference Manual
show 802.1x auth_configuration
Purpose Used to display the current configuration of the 802.1x server on the Switch.
Syntax
show
802.1x auth_configuration {ports <portlist>}
Description The show 802.1x command is used to display the current configuration of the 802.1x Port-
based Network Access Control server application on the Switch.
The following details what is displayed:
802.1x Enabled/Disabled − Shows the current status of 802.1x functions on the Switch.
Authentication Protocol: Radius_Eap − Shows the authentication protocol suite in use
between the Switch and a RADIUS server.
Port number − Shows the physical port number on the Switch.
Capability: Authenticator/None − Shows the capability of 802.1x functions on the port number
displayed above. There are four 802.1x capabilities that can be set on the Switch:
Authenticator, Supplicant, Authenticator and Supplicant, and None.
Port Status: Authorized/Unauthorized − Shows the result of the authentication process.
Authorized means that the user was authenticated, and can access the network.
Unauthorized means that the user was not authenticated, and can not access the network.
PAE State: Initialize/Disconnected/Connecting/ Authenticating/Authenticated/Held
/ForceAuth/ForceUnauth − Shows the current state of the Authenticator PAE.
Backend State: Request/Response/Fail/Idle/Initialize − Shows the current state of the
Backend Authenticator.
AdminCtlDir: Both/In − Shows whether a controlled Port that is unauthorized will exert control
over communication in both receiving and transmitting directions, or just the receiving
direction.
OpenCtlDir: Both/In − Shows whether a controlled Port that is unauthorized will exert control
over communication in both receiving and transmitting directions, or just the receiving
direction.
Port Control: ForceAuth/ForceUnauth/Auto − Shows the administrative control over the port’s
authorization status. ForceAuth forces the Authenticator of the port to become Authorized.
ForceUnauth forces the port to become Unauthorized.
QuietPeriod − Shows the time interval between authentication failure and the start of a new
authentication attempt.
TxPeriod − Shows the time to wait for a response from a supplicant (user) to send EAP
Request/Identity packets.
SuppTimeout − Shows the time to wait for a response from a supplicant (user) for all EAP
packets, except for the Request/Identity packets.
ServerTimeout − Shows the length of time to wait for a response from a RADIUS server.
MaxReq − Shows the maximum number of times to retry sending packets to the supplicant.
ReAuthPeriod − Shows the time interval between successive re-authentications.
ReAuthenticate: Enabled/Disabled − Shows whether or not to re-authenticate.
Parameters
ports <portlist> − Specifies a port or range of ports to be viewed.
Only administrator-level users can issue this command. Restrictions
169
To Next Page
Loading...
