Displaying Acl Status - AMX NXA-ENET8-2POE Operation/Reference Manual

NAS Statistics Port parameters (Cont.)
Selected Counters
This table is visible when the port is one of the following administrative states: Multi 802.1X or MAC-
based Auth. The table is identical to and is placed next to the Port Counters table, and will be empty if no
MAC address is currently selected. To populate the table, select one of the attached MAC Addresses
from the table.
Attached MAC Addresses
• Identity
• MAC Address
• VLAN ID
• State
• Last
Authentication
1.
Click Monitor, Security, Network, NAS, Port.
2.
Select a port from the scroll-down list.

Displaying ACL Status

Use the ACL Status page to show the status for different security modules which use ACL filtering, including
ingress port, frame type, and forwarding action. Each row describes a defined ACE (see the Filtering Traffic
With Access Control Lists section on page 71).
FIG. 126 ACL Status
ACL Status parameters
• User
• Ingress Port
NXA-ENET8-2POE Gigabit Ethernet Layer 2 PoE Switch
Shows the identity of the supplicant, as received in the Response Identity EAPOL
frame.
Clicking the link causes the supplicant's EAPOL and Backend Server counters to
be shown in the Selected Counters table.
If no supplicants are attached, it shows No supplicants attached. This column is
not available for MAC-based Auth.
For Multi 802.1X, this column holds the MAC address of the attached supplicant.
For MAC-based Auth., this column holds the MAC address of the attached client.
Clicking the link causes the client's Backend Server counters to be shown in the
Selected Counters table.
If no clients are attached, it shows No clients attached.
This column holds the VLAN ID that the corresponding client is currently secured
to through the Port Security module.
The client can either be authenticated or unauthenticated. In the authenticated
state, it is allowed to forward frames on the port, and in the unauthenticated state,
it is blocked. As long as the backend server has not successfully authenticated
the client, it is unauthenticated.
If an authentication fails for one or the other reason, the client will remain in the
unauthenticated state for Hold Time seconds (see the Displaying Information
About Learned Mac Addresses section on page 151.
Shows the date and time of the last authentication of the client (successful as well
as unsuccessful).
Indicates the ACL user (see the Configuring User Privilege Levels section on
page 50 for a list of software modules).
Indicates the ingress port to which the ACE applies. Possible values are:
Any: The ACE will match any ingress port.
Policy: The ACE will match ingress ports with a specific policy.
Port: The ACE will match a specific ingress port.
Monitoring the NXA-ENET8-2POE
155