Cisco Catalyst 4500 series Administration Manual page 1188

Configuring 802.1X Port-Based Authentication
Figure 46-13
Outbound ACLs (for example, 100.out) are not supported.
Note
Debug Commands for Per-User ACL and Filter-ID ACL
The IP device tracking table contains the host IP address learned through ARP or DHCP. The following
command displays the constraints on the IP device tracking table:
Switch# show ip device tracking all
IP Device Tracking = Enabled
IP Device Tracking Probe Count = 3
IP Device Tracking Probe Interval = 30
--------------------------------------------------------------
IP Address MAC Address Interface STATE
--------------------------------------------------------------
50.0.0.12 0015.60a4.5e84 GigabitEthernet2/9 ACTIVE
The following command shows authentication sessions that contains the Filter-Id 100:
Switch-2033# show authentication sessions interface G2/9 details
Software Configuration Guide—Release IOS XE 3.6.0E and IOS 15.2(2)E
46-50
Configuring the Filter-ID Attribute
Interface: GigabitEthernet2/9
MAC Address: 2c54.2d6a.0344
Chapter 46 Configuring 802.1X Port-Based Authentication
OL_28731-01