HP ProCurve 9304M Security Manual page 106

Security Guide for ProCurve 9300/9400 Series Routing Switches
To display information about the 802.1X configuration on an individual port, enter a command such as the
following:
ProCurveRS# show dot1x config e 1/3
Port 1/3 Configuration:
Authenticator PAE state:
Backend Authentication state:
AdminControlledDirections:
OperControlledDirections:
AuthControlledPortControl:
AuthControlledPortStatus:
quiet-period:
tx-period: 30 Seconds
supptimeout:
servertimeout:
maxreq: 2
re-authperiod:
security-hold-time: 60 Seconds
re-authentication: Disable
multiple-hosts: Disable
filter-strict-security: Enable
Protocol Version:
Syntax: show dot1x config <portnum>
The following additional information is displayed in the show dot1x config command for an interface:
Table 4.2: Output from the show dot1x config command for an interface
This Field...
Authenticator PAE state
Backend Authentication state
AdminControlledDirections
4 - 20
AUTHENTICATED
IDLE
BOTH
BOTH
Auto
authorized
60 Seconds
30 Seconds
30 Seconds
3600 Seconds
1
Displays...
The current status of the Authenticator PAE state machine. This can
be INITIALIZE, DISCONNECTED, CONNECTING,
AUTHENTICATING, AUTHENTICATED, ABORTING, HELD,
FORCE_AUTH, or FORCE_UNAUTH.
Note: When the Authenticator PAE state machine is in the
AUTHENTICATING state, if the reAuthenticate, eapStart, eapLogoff,
or authTimeout parameters are set to TRUE, it may place the
Authenticator PAE state machine indefinitely in the ABORTING state.
If this should happen, use the dot1x initialize command to initialize
802.1X port security on the port, or unplug the Client or hub
connected to the port, then reconnect it.
The current status of the Backend Authentication state machine. This
can be REQUEST, RESPONSE, SUCCESS, FAIL, TIMEOUT, IDLE,
or INITIALIZE.
Indicates whether an unauthorized controlled port exerts control over
communication in both directions (disabling both reception of
incoming frames and transmission of outgoing frames), or just in the
incoming direction (disabling only reception of incoming frames). On
HP devices, this parameter is set to BOTH.
June 2005