Displaying 802.1X information

Brocade# show dot1x mac-address-filter e 1/1/3

Port 1/1/3 MAC Address Filter information:

802.1X Dynamic MAC Address Filter : mac filter-group 2

Port default MAC Address Filter: No mac address filter is set

Syntax: show dot1x mac-address-filter all ethernet port

The all keyword displays all dynamically applied MAC address filters active on the device. Specify the port variable in stack-unit/slotnum/portnumformat.

To display the dynamically applied IP ACLs active on an interface, enter a command such as the following.

Brocade# show dot1x ip-ACL ethernet 1/1/3

Port 1/1/3 IP ACL

information:

802.1X dynamic IP ACL (user defined) in:

ip

access-list extended Port_1/1/3_E_IN in

Port

default IP

ACL in:

No

inbound ip

access-list is set

802.1X dynamic IP ACL (user defined) out:

ip

access-list extended Port_1/1/3_E_OUT out

Port

default IP

ACL out:

No

outbound ip access-list is set

Syntax: show dot1x ip-ACL all ethernet port

The all keyword displays all dynamically applied IP ACLs active on the device.

Specify the port variable in stack-unit/slotnum/portnumformat.

Displaying the status of strict security mode

The output of the show dot1x and show dot1x config commands indicate whether strict security mode is enabled or disabled globally and on an interface.

Displaying the status of strict security mode globally on the device

To display the status of strict security mode globally on the device, enter the show dot1x command.

190

Brocade ICX 6650 Security Configuration Guide

 

53-1002601-01

Page 210
Image 210
Brocade Communications Systems 6650 manual Displaying the status of strict security mode