Cisco Catalyst 4500 Series Software Configuration Manual page 1329

Chapter 49 Configuring 802.1X Port-Based Authentication
Figure 49-13 Configuring the Filter-ID Attribute
Outbound ACLs (for example, 100.out) are not supported.
Note
Debug Commands for Per-User ACL and Filter-ID ACL
The IP device tracking table contains the host IP address learned through ARP or DHCP. The following command displays the
constraints on the IP device tracking table:
Switch# show ip device tracking all
IP Device Tracking = Enabled
IP Device Tracking Probe Count = 3
IP Device Tracking Probe Interval = 30
--------------------------------------------------------------
IP Address MAC Address Interface STATE
--------------------------------------------------------------
50.0.0.12 0015.60a4.5e84 GigabitEthernet2/9 ACTIVE
The following command shows authentication sessions that contains the Filter-Id 100:
Switch-2033# show authentication sessions interface G2/9 details
Interface:
MAC Address:
GigabitEthernet2/9
2c54.2d6a.0344
Catalyst 4500 Series Switch, Cisco IOS Software Configuration Guide - Cisco IOS XE 3.9.xE and IOS 15.2(5)Ex
Configuring 802.1X Port-Based Authentication
49-49