HP ProCurve 9304M Security Manual page 134

Security Guide for ProCurve 9300/9400 Series Routing Switches
The following table describes the information displayed by the show authenticated-mac-address command.
Table 6.4: Output from the show authenticated-mac-address command
This Field...
Port
Dynamic-Vlan Assignment
RADIUS failure action
No-override-restrict-vlan
Vlan
DOS attack protection
Accepted Mac Addresses
Rejected Mac Addresses
Authentication in progress
Authentication attempts
RADIUS timeouts
Aging of MAC-sessions
Max-Age of MAC-sessions
MAC Filter applied
MAC/IP Address
RADIUS Server
Authenticated
6 - 12
Displays...
The port to which this information applies.
Whether RADIUS dynamic VLAN assignment has been enabled for
the port.
What happens to traffic from a MAC address for which RADIUS
authentication has failed: either block the traffic or assign the MAC
address to a restricted VLAN.
Whether a port can be dynamically assigned to a VLAN specified by a
RADIUS server, if the port had been previously placed in the restricted
VLAN because a previous attempt at authenticating a MAC address
on that port failed.
The VLAN to which the port is assigned, and whether the port had
been dynamically assigned to the VLAN by a RADIUS server.
Whether denial of service attack protection has been enabled for
multi-device port authentication, limiting the rate of authentication
attempts sent to the RADIUS server.
The number of MAC addresses that have been successfully
authenticated.
The number of MAC addresses for which authentication has failed.
The number of MAC addresses for which authentication is pending.
This is the number of MAC addresses for which an Access-Request
message has been sent to the RADIUS server, and for which the
RADIUS server has not yet sent an Access-Accept message.
The total number of authentication attempts made for MAC addresses
on an interface, including pending authentication attempts.
The number of times the session between the HP device and the
RADIUS server timed out.
Whether software aging of MAC addresses is enabled.
The configured software aging period.
Whether a MAC filter has been applied to this port to specify pre­
authenticated MAC addresses.
The MAC addresses learned on the port. If the packet for which multi­
device port authentication was performed also contained an IP
address, then the IP address is displayed as well.
The IP address of the RADIUS server used for authenticating the
MAC addresses.
Whether the MAC address has been authenticated by the RADIUS
server.
June 2005