Additional show sessions network verbose Output

Field

Description

Client MAC

MAC address of the session user.

 

 

GID

Global session ID, a unique session number.

 

 

 

Status of the session:

 

• AUTH, ASSOC REQ—Client is being associated by the 802.1X protocol.

 

• AUTH AND ASSOC—Client is being associated by the 802.1X protocol, and the user is being

 

authenticated.

 

AUTHORIZING—User has been authenticated (for example, by the 802.1X protocol and an AAA

 

method), and is entering AAA authorization.

 

AUTHORIZED—User has been authorized by an AAA method.

 

ACTIVE—User’s AAA attributes have been applied, and the user is active on the network.

 

DEASSOCIATED—One of the following:

 

• Wireless client has sent the switch a disassociate message.

State

• User associated with one of the current switch’s access points has appeared at another switch

 

in the Mobility Domain.

 

• ROAMING AWAY—The switch has been sent a request to transfer the user, who is roaming, to

 

another switch.

 

• STATUS UPDATED— switch is receiving a final update from an access point about the user,

 

who has roamed away.

 

WEB_AUTHING—User is being authenticated by WebAAA.

 

• WIRED AUTH’ING—User is being authenticated by the 802.1X protocol on a wired authentication

 

port.

 

KILLING—User’s session is being cleared, because of 802.1X authentication failure, entry of a

 

clear command, or some other event.

 

 

 

Shows the following information about the AP and radio the session is currently on:

now on

• IP address and port number of the switch managing the AP

• Serial number and radio number of the AP

 

 

• Amount of time the session has been on this AP

 

 

from

Shows information about the APs from which the session has roamed. (See the descriptions

above for the now on field.)

 

 

 

Host name

Host name of the user’s networking device.

 

 

 

Authorization attributes for the user and how they were assigned (the sources of the attribute

 

values). For Vlan-Name, the source of the attribute value can be one of the following:

 

AAA—VLAN is from RADIUS or the local database.

 

initial-assignment—For a client that has roamed from one switch to another, VLAN is the

 

one assigned to the user on the switch where the user first accessed the network. (This is the

 

switch where the client’s global session started.)This authorization source (initial-assignment) is

Vlan-Name

displayed only if the following conditions are true:

(and other

• The client roamed from another switch.

attributes if

• The service profile for the SSID the user is on is configured to keep the client’s initial VLAN

set)

assignment. (This means the keep-initial-vlan option is enabled on the service profile.)

 

• The VLAN is not configured for the user on the roamed-to switch by the local database.

 

• A Location Policy on the roamed-to switch does not set the VLAN.

 

• location policy—Attribute value was assigned by a Location Policy.

 

service-profile—Attribute value is configured on the SSID, and was not overridden by other

 

attribute sources (such as AAA or location policy).

 

• Web Portal—Session is for a Web Portal client.

 

 

D-Link DWS-1008 CLI Manual

264

Page 267
Image 267
D-Link dws-1008 manual Additional show sessions network verbose Output, Link DWS-1008 CLI Manual 264