Note: If there are no ACLs currently assigned to any port in <port-list>,
executing this command returns only the system prompt. If a client authenticates but
the server does not return a RADIUS-assigned ACL to the client port, then the server
does not have a valid ACL configured and assigned to that client's authentication
credentials.
For example, the following output shows that a RADIUS server has assigned an ACL to port B1 to
filter inbound traffic from an authenticated client identified by a MAC address of 00-17-A4-E6-D7-87.
Figure 14 Example showing a RADIUS-assigned ACL application to a currently active client session
Syntax:
show port-access <web-based | mac-based | authenticator>
clients <port-list> detailed
For ports in <port-list> configured for authentication, this command shows the details of the
RADIUS-assigned features listed below that are active as the result of a client authentication. (Ports
in <port-list> not configured for authentication are not listed.)
Client Base Details:
Port Port number of port configured for authentication.
Session Status Indicates whether there is an authenticated client
session active on the port. Options include
authenticated and unauthenticated.
Username During an authenticated session, shows the user name
of the authenticated client. If the client is not
authenticated, this field is empty.
IP Shows the authenticated client's IP address, if
available. Requires DHCP snooping enabled on the
switch. When "n/a" appears in the field, the switch
has not been able to acquire the client's IP address.
(Where the client IP address is available to the switch,
it can take a minute or longer for the switch to learn
the address.)
Session Time (sec) For an unauthenticated session, indicates the elapsed
time in seconds since the client was detected on the
port. For an authenticated session, this indicates the
elapsed time in seconds since the client was
authenticated on the port.
Configuring RADIUS server support for switch services 53
To Next Page
Loading...
Need help?
General
