CLI (Command Line Interface)
208 NXA-ENET24 - Software Management Guide
802.1x Port Authentication Commands (Cont.)
Command Function
show dot1x (Cont.) tx-period– Time a port waits during authentication session before re-
transmitting EAP packet (page 4-86).
supplicant-timeout– Supplicant timeout.
server-timeout– Server timeout.
reauth-max– Maximum number of reauthentication attempts.
max-req– Maximum number of times a port will retransmit an EAP
request/identity packet to the client before it times out the authentication
session (page 4-82).
Status– Authorization status (authorized or not).
Operation Mode– Shows if single or multiple hosts (clients) can connect
to an 802.1X-authorized port.
Max Count– The maximum number of hosts allowed to access this port
(page 4-83).
Port-control–Shows the dot1x mode on a port as auto, force-authorized,
or force-unauthorized (page 4-83).
Supplicant– MAC address of authorized client.
Current Identifier– The integer (0-255) used by the Authenticator to
identify the current authentication session.
• Authenticator State Machine
State– Current state (including initialize, disconnected, connecting,
authenticating, authenticated, aborting, held, force_authorized,
force_unauthorized).
Reauth Count– Number of times connecting state is re-entered.
• Backend State Machine
State– Current state (including request, response, success, fail, timeout,
idle, initialize).
Request Count– Number of EAP Request packets sent to the Supplicant
without receiving a response.
Identifier(Server)– Identifier carried in the most recent EAP Success,
Failure or Request packet received from the Authentication Server.
• Reauthentication State Machine
State– Current state (including initialize, reauthenticate).
Example:
Console#show dot1x
Global 802.1X Parameters
system-auth-control: enable
802.1X Port Summary
Port Name Status Operation Mode Mode
Authorized
1/1 disabled Single-Host ForceAuthorized n/a
1/2 enabled Sing le-Host auto yes
.
.
.
1/26 disabled Single-Host ForceAuthorized n/a
802.1X Port Details
802.1X is disabled on port 1/1
802.1X is enabled on port 1/2
reauth-enabled: Enable
reauth-period: 1800
quiet-period: 30
tx-period: 40
supplicant-timeout:30
server-timeout: 10
reauth-max: 2
max-req: 5
Status Authorized