D-Link DWS-1008 Cli Reference Manual page 267

Additional show sessions network verbose Output
Field
Client MAC MAC address of the session user.
GID Global session ID, a unique session number.
Status of the session:
• AUTH, ASSOC REQ—Client is being associated by the 802.1X protocol.
• AUTH AND ASSOC—Client is being associated by the 802.1X protocol, and the user is being
authenticated.
• AUTHORIZING—User has been authenticated (for example, by the 802.1X protocol and an AAA
method), and is entering AAA authorization.
• AUTHORIZED—User has been authorized by an AAA method.
• ACTIVE—User's AAA attributes have been applied, and the user is active on the network.
• DEASSOCIATED—One of the following:
State
• ROAMING AWAY—The switch has been sent a request to transfer the user, who is roaming, to
another switch.
• STATUS UPDATED— switch is receiving a final update from an access point about the user,
who has roamed away.
• WEB_AUTHING—User is being authenticated by WebAAA.
• WIRED AUTH'ING—User is being authenticated by the 802.1X protocol on a wired authentication
port.
• KILLING—User's session is being cleared, because of 802.1X authentication failure, entry of a
clear command, or some other event.
Shows the following information about the AP and radio the session is currently on:
now on
Shows information about the APs from which the session has roamed. (See the descriptions
from
above for the now on field.)
Host name Host name of the user's networking device.
Authorization attributes for the user and how they were assigned (the sources of the attribute
values). For Vlan-Name, the source of the attribute value can be one of the following:
• AAA—VLAN is from RADIUS or the local database.
• initial-assignment—For a client that has roamed from one switch to another, VLAN is the
one assigned to the user on the switch where the user first accessed the network. (This is the
switch where the client's global session started.)This authorization source (initial-assignment) is
Vlan-Name displayed only if the following conditions are true:
(and other
attributes if
set)
• location policy—Attribute value was assigned by a Location Policy.
• service-profile—Attribute value is configured on the SSID, and was not overridden by other
attribute sources (such as AAA or location policy).
• Web Portal—Session is for a Web Portal client.
D-Link DWS-1008 CLI Manual
• Wireless client has sent the switch a disassociate message.
• User associated with one of the current switch's access points has appeared at another switch
in the Mobility Domain.
• IP address and port number of the switch managing the AP
• Serial number and radio number of the AP
• Amount of time the session has been on this AP
• The client roamed from another switch.
• The service profile for the SSID the user is on is configured to keep the client's initial VLAN
assignment. (This means the keep-initial-vlan option is enabled on the service profile.)
• The VLAN is not configured for the user on the roamed-to switch by the local database.
• A Location Policy on the roamed-to switch does not set the VLAN.
Description