Cisco Catalyst 4500 Series Configuration Manual page 1045

Chapter 44 Configuring 802.1X Port-Based Authentication
Dot1x Info for GigabitEthernet7/2
-----------------------------------
PAE
PortControl
ControlDirection
HostMode
QuietPeriod
ServerTimeout
SuppTimeout
ReAuthMax
MaxReq
TxPeriod
Dot1x Authenticator Client List
-------------------------------
Supplicant
Session ID
Auth SM State
Auth BEND SM State
Port Status
To determine if a host was authenticated using MAB when fallback authentication is configured on the
port, enter the following commands:
Switch# show authentication sessions interface g7/2
Common Session ID:
Runnable methods list:
Switch# show mab interface g7/2 detail
MAB details for GigabitEthernet7/2
-------------------------------------
Mac-Auth-Bypass
MAB Client List
---------------
Client MAC
Session ID
MAB SM state
Auth Status
OL-25340-01
= AUTHENTICATOR
= AUTO
= Both
= MULTI_AUTH
= 60
= 0
= 30
= 2
= 2
= 2
= 0060.b057.4687
= C0A8013F0000000901BAB560
= AUTHENTICATED
= IDLE
= AUTHORIZED
Interface: GigabitEthernet7/2
MAC Address: 0060.b057.4687
IP Address: 192.168.22.22
User-Name: 0060b0574687
Status: Authz Success
Domain: DATA
Oper host mode: multi-auth
Oper control dir: both
Authorized By: Authentication Server
Vlan Policy: N/A
Session timeout: N/A
Idle timeout: N/A
C0A8013F0000000B01BBD278
Acct Session ID: 0x0000000D
Handle: 0xF500000B
Method State
dot1x Failed over
mab Authc Success
= Enabled
= 0060.b057.4687
= C0A8013F0000000B01BBD278
= TERMINATE
= AUTHORIZED
Software Configuration Guide—Release IOS XE 3.3.0SG and IOS 15.1(1)SG
Configuring 802.1X Port-Based Authentication
44-77