Chapter 8
| Authentication Commands
802.1X Port Authentication
– 266 –
â–
Max Request – Maximum number of times a port will retransmit an EAP
request/identity packet to the client before it times out the authentication
session (page 259).
â–
Operation Mode– Shows if single or multiple hosts (clients) can connect to
an 802.1X-authorized port.
â–
Port Control–Shows the dot1x mode on a port as auto, force-authorized, or
force-unauthorized (page 261).
â–
Intrusion Action– Shows the port response to intrusion when
authentication fails (page 258).
â–
Supplicant– MAC address of authorized client.
â—† Authenticator PAE State Machine
â–
State – Current state (including initialize, disconnected,
connecting,
authenticating, authenticated, aborting,
held, force_authorized,
force_unauthorized).
â–
Reauth Count– Number of times connecting state is re-entered.
â–
Current Identifier– The integer (0-255) used by the Authenticator to identify
the current authentication session.
â—† Backend State Machine
â–
State – Current state (including request, response, success, fail, timeout,
idle, initialize).
â–
Request Count– Number of EAP Request packets sent to the Supplicant
without receiving a response.
â–
Identifier (Server)– Identifier carried in the most recent EAP Success, Failure
or Request packet received from the Authentication Server.
â—† Reauthentication State Machine
State – Current state (including initialize, reauthenticate).
Example
Console#show dot1x
Global 802.1X Parameters
System Auth Control : Enabled
Authenticator Parameters:
EAPOL Pass Through : Disabled
802.1X Port Summary
Port Type Operation Mode Control Mode Authorized
-------- ------------- -------------- ------------------ ----------
Eth 1/ 1 Disabled Single-Host Force-Authorized Yes
Eth 1/ 2 Disabled Single-Host Force-Authorized Yes
.
.
.
Eth 1/27 Disabled Single-Host Force-Authorized Yes
Eth 1/28 Enabled Single-Host Auto Yes
802.1X Port Details
802.1X Authenticator is enabled on port 1/1
802.1X Supplicant is disabled on port 1/1