beautypg.com

Sample 802.1x configurations – Brocade FastIron Ethernet Switch Security Configuration Guide User Manual

Page 210

background image

Output from the show dot1x mac-session command (Continued)

TABLE 19

Field

Description

PAE State

The current status of the Authenticator PAE state machine. This canbe INITIALIZE,
DISCONNECTED, CONNECTING,AUTHENTICATING, AUTHENTICATED, ABORTING,
HELD,FORCE_AUTH, or FORCE_UNAUTH.

NOTE
When the Authenticator PAE state machine is in theAUTHENTICATING state, if the
reAuthenticate, eapStart, eapLogoff,or authTimeout parameters are set to TRUE, it may place
theAuthenticator PAE state machine indefinitely in the ABORTING state.If this should happen,
use the dot1x initialize command to initialize802.1X port security on the port, or unplug the
Client or hubconnected to the port, then reconnect it.

Displaying information about the ports in an 802.1X multiple-host configuration

To display information about the ports in an 802.1X multiple-host configuration, enter the sh do mac-s
br
command.

Brocade#show dot1x mac-session brief

Port Number of Number of Dynamic Dynamic Dynamic

users Authorized users VLAN ACL MAC-Filt

--------------------------------------------------------------------

4/1/12 2 2 no no no

Syntax: show dot1x mac-session brief

The following table describes the information displayed by the show dot1x mac-session brief
command.

Output from the show dot1x mac-session brief command

TABLE 20

Field

Description

Port

Information about the users connected to each port.

Number of users

The number of users connected to the port.

Number of Authorized users The number of users connected to the port that have been successfully

authenticated.

Dynamic VLAN

Whether the port is a member of a RADIUS-specified VLAN.

Dynamic Filters

Whether RADIUS-specified IP ACLs or MAC address filters have been applied to
the port.

Sample 802.1X configurations

This section illustrates a sample point-to-point configuration and a sample hub configuration that use
802.1X port security.

Displaying information about the ports in an 802.1X multiple-host configuration

210

FastIron Ethernet Switch Security Configuration Guide

53-1003088-03