Displaying 802.1X information

The following additional information is displayed in the show dot1x config command for an interface.

TABLE 33 Output from the show dot1x config command for an interface

Field

Description

 

 

Authenticator PAE state

The current status of the Authenticator PAE state machine. This can

 

be INITIALIZE, DISCONNECTED, CONNECTING, AUTHENTICATING,

 

AUTHENTICATED, ABORTING, HELD, FORCE_AUTH, or

 

FORCE_UNAUTH.

 

NOTE: When the Authenticator PAE state machine is in the

 

AUTHENTICATING state, if the reAuthenticate, eapStart,

 

eapLogoff, or authTimeout parameters are set to TRUE, it

 

may place the Authenticator PAE state machine indefinitely

 

in the ABORTING state. If this should happen, use the dot1x

 

initialize command to initialize 802.1X port security on the

 

port, or unplug the Client or hub connected to the port, then

 

reconnect it.

 

 

Backend Authentication state

The current status of the Backend Authentication state machine.

 

This can be REQUEST, RESPONSE, SUCCESS, FAIL, TIMEOUT, IDLE,

 

or INITIALIZE.

 

 

AdminControlledDirections

Indicates whether an unauthorized controlled port exerts control

 

over communication in both directions (disabling both reception of

 

incoming frames and transmission of outgoing frames), or just in

 

the incoming direction (disabling only reception of incoming

 

frames). On Brocade devices, this parameter is set to BOTH.

 

 

OperControlledDirections

The setting for the OperControlledDirections parameter, as defined

 

in the 802.1X standard. According to the 802.1X standard, if the

 

AdminControlledDirections parameter is set to BOTH, the

 

OperControlledDirections parameter is unconditionally set to BOTH.

 

Since the AdminControlledDirections parameter on Brocade

 

devices is always set to BOTH, the OperControlledDirections

 

parameter is also set to BOTH.

 

 

AuthControlledPortControl

The port control type configured for the interface. If set to auto,

 

authentication is activated on the 802.1X-enabled interface.

 

 

AuthControlledPortStatus

The current status of the interface controlled port either authorized

 

or unauthorized.

 

 

multiple-hosts

Whether the port is configured to allow multiple Supplicants

 

accessing the interface on the Brocade device through a hub.

 

Refer to “Allowing access to multiple hosts” on page 179 for

 

information on how to change this setting.

 

 

186

Brocade ICX 6650 Security Configuration Guide

 

53-1002601-01

Page 206
Image 206
Brocade Communications Systems 6650 manual Forceunauth