Displaying 802.1X information

The show run command also indicates the VLAN to which the port has been dynamically assigned. When you enter the show run command, the output indicates that the port is a member of the VLAN to which it was dynamically assigned through 802.1X. If you then enter the write memory command, the VLAN to which the port is currently assigned becomes the port default VLAN in the device configuration.

If the VLAN name supplied by the RADIUS server corresponds to a statically configured VLAN, the output indicates that the port is a member of the VLAN to which it was dynamically assigned through 802.1X. If you then enter the write memory command, the VLAN to which the port is currently assigned becomes the port default VLAN in the device configuration.

Displaying information about dynamically applied

MAC address filters and IP ACLs

You can display information about currently active user-defined and dynamically applied MAC address filters and IP ACLs.

Displaying user-defined MAC address filters and IP ACLs

To display the user-defined MAC address filters active on the device, enter the following command.

Brocade# show dot1x mac-address filter

Port 1/1/3 (User defined MAC Address Filter) : mac filter 1 permit any any

Syntax: show dot1x mac-address-filter

To display the user-defined IP ACLs active on the device, enter the show dot1x ip-ACLcommand.

Brocade# show dot1x ip-ACL

Port 1/1/3 (User defined IP ACLs):

Extended IP access list Port_1/1/3_E_IN permit udp any any

Extended IP access list Port_1/1/3_E_OUT permit udp any any

Syntax: show dot1x ip-ACL

Displaying dynamically applied MAC address filters and IP ACLs

To display the dynamically applied MAC address filters active on an interface, enter a command such as the following.

Brocade ICX 6650 Security Configuration Guide

189

53-1002601-01

 

Page 209
Image 209
Brocade Communications Systems 6650 Displaying user-defined MAC address filters and IP ACLs, Syntax show dot1x ip-ACL