| Authentication Commands
C
27
HAPTER
802.1X Port Authentication
show dot1x
This command shows general port authentication related settings on the
switch or a specific interface.
S
YNTAX
show dot1x [statistics] [interface interface]
statistics - Displays dot1x status for each port.
interface
ethernet unit/port
unit - Stack unit. (Range: 1)
port - Port number. (EC-S4626F: 1-26, EC-S4650F: 1-50)
C
M
OMMAND
ODE
Privileged Exec
C
U
OMMAND
SAGE
This command displays the following information:
Global 802.1X Parameters – Shows whether or not 802.1X port
◆
authentication is globally enabled on the switch
Authenticator Parameters – Shows whether or not EAPOL pass-through
◆
is enabled
(page
694).
802.1X Port Summary – Displays the port access control parameters
◆
for each interface that has enabled 802.1X, including the following
items:
Type – Administrative state for port access control (Enabled,
■
Authenticator, or Supplicant).
Operation Mode–Allows single or multiple hosts
■
Control Mode– Dot1x port control mode
■
Authorized– Authorization status (yes or n/a - not authorized).
■
802.1X Port Details – Displays the port access control parameters for
◆
each interface, including the following items:
Reauthentication – Periodic re-authentication
■
Reauth Period – Time after which a connected client must be re-
■
authenticated
(page
Quiet Period – Time a port waits after Max Request Count is
■
exceeded before attempting to acquire a new client
TX Period – Time a port waits during authentication session before
■
re-transmitting EAP packet
Supplicant Timeout – Supplicant timeout.
■
Server Timeout – Server timeout.
■
Reauth Max Retries – Maximum number of reauthentication
■
attempts.
Max Request – Maximum number of times a port will retransmit an
■
EAP request/identity packet to the client before it times out the
authentication session
– 702 –
(page
699).
(page
700).
(page
696).
(page
695).
(page
697).
698).
(page
698).
(page
699).