Configuring Port-Based Access Control (802.1X)

Displaying 802.1X Configuration, Statistics, and Counters

Viewing 802.1X Open VLAN Mode Status

You can examine the switch’s current VLAN status by using the show port- access authenticator and show vlan < vlan-id> commands as illustrated in this section. Figure 8-5 shows an example of show port-access authenticator output, and table 8-1 describes the data that this command displays. Figure 8-6 shows related VLAN data that can help you to see how the switch is using statically configured VLANs to support 802.1X operation.

An Unauth VLAN ID appearing in the Current VLAN ID column for the same port indicates an unauthenticated client is connected to this port.

(Assumes that the port is not a statically configured member of VLAN 100.)

12

Items 1 through 3 indicate that an authenticated client is connected to port B2:

1.Open in the Status column

2.Authorized in the Authenticator State column

3.The Auth VLAN ID (101) is also in the Current VLAN ID column. (This assumes that the port is not a statically configured member of VLAN 101.)

3 4 5

4.A “0” in the row for port B3 indicates there is no Authorized VLAN configured for port B3.

5.“No PVID” means there is currently no untagged VLAN membership on port B4.

Figure 8-5. Example Showing Ports Configured for Open VLAN Mode

Thus, in the show port-access authenticator output:

When the Auth VLAN ID is configured and matches the Current VLAN ID in the above command output, an authenticated client is connected to the port. (This assumes the port is not a statically configured member of the VLAN you are using for Auth VLAN.)

8-40

Page 222
Image 222
HP 4100gl, 2650 (J4899A/B), 2626 (J4900A/B), 2600-PWR, 6108 manual Viewing 802.1X Open Vlan Mode Status