D-Link xStack DGS-3400 Series Reference Manual page 417

xStack
show mac_based_access_control auth_state
Description
Parameters
Restrictions
Example usage:
Suppose that port 1 is in host based mode:
•
MAC 00-00-00-00-00-01 is authenticated without a VLAN assigned (may be the specified target VLAN does not
exist or the target VLAN has not been specified at all), the ID of the RX VLAN will be displayed (RX VLAN ID is
4004 in this example).
•
MAC 00-00-00-00-00-02 is authenticated with a target VLAN assigned, the ID of the target VLAN will be
displayed (target VLAN ID is 1234 in this example).
•
MAC 00-00-00-00-00-03 fails to pass authentication, the VID field will be shown as "-", indicating that packets
with SA 00-00-00-00-00-03 will be dropped no matter which VLAN these packets are from.
•
MAC 00-00-00-00-00-04 attempts to start authentication, the VID field will be shown as "-"until authentication
completes.
Suppose that port 2 is in port based mode:
•
MAC 00-00-00-00-00-10 is the host which causes port 2 to pass authentication; the MAC address is followed by
"(P)" to indicate port based mode authentication.
Suppose that port 3 is in port based mode:
•
MAC 00-00-00-00-00-20 attempts to start authentication, the MAC address is followed by "(P)" to indicate port
based mode authentication.
•
MAC 00-00-00-00-00-21 fails to pass authentication, the MAC address is followed by "(P)" to indicate port based
mode authentication.
NOTE: In port-based mode, the VLAN ID field is displayed in the same way as host based mode.
To display the MAC-based Access Control authentication status on port 1, 2, 3.
DGS-3450:admin# show mac_based_access_control auth_state ports 1:1-1:3
Command: show mac_based_access_control auth_state ports 1:1-1:3
P:Port based Pri:Priority
Port MAC Address
---- ------------------- --------- ------------- ---------- -------- ----------
1 00-00-00-00-00-01
1 00-00-00-00-00-02
1 00-00-00-00-00-03
1 00-00-00-00-00-04
2 00-00-00-00-00-10(P)
3 00-00-00-00-00-20(P)
3 00-00-00-00-00-21(P)
DGS-3450:admin#
®
DGS-3400 Series Layer 2 Gigabit Ethernet Managed Switch CLI Manual
This command is used to display the MAC-based Access Control authentication status.
<portlist> - Display authentication status by specific port.
If not specified port(s), it will display all of MAC-based Access Control ports authentication
status.
None.
Original State
RX VID
4004 Authenticated
4004 Authenticated
4004 Blocked
4004 Authenticating
1 Authenticated
1 Authenticating
1 Blocked
VID
4004
1234
-
-
1234
-
-
413
Pri Aging Time/
Block Time
3 Infinite
- Infinite
- 60
- 5
4 1440
- 20
- 120