Sample 802.1x configurations – Brocade FastIron Ethernet Switch Security Configuration Guide User Manual
Page 210
Output from the show dot1x mac-session command (Continued)
TABLE 19
Field
Description
PAE State
The current status of the Authenticator PAE state machine. This canbe INITIALIZE,
DISCONNECTED, CONNECTING,AUTHENTICATING, AUTHENTICATED, ABORTING,
HELD,FORCE_AUTH, or FORCE_UNAUTH.
NOTE
When the Authenticator PAE state machine is in theAUTHENTICATING state, if the
reAuthenticate, eapStart, eapLogoff,or authTimeout parameters are set to TRUE, it may place
theAuthenticator PAE state machine indefinitely in the ABORTING state.If this should happen,
use the dot1x initialize command to initialize802.1X port security on the port, or unplug the
Client or hubconnected to the port, then reconnect it.
Displaying information about the ports in an 802.1X multiple-host configuration
To display information about the ports in an 802.1X multiple-host configuration, enter the sh do mac-s
br command.
Brocade#show dot1x mac-session brief
Port Number of Number of Dynamic Dynamic Dynamic
users Authorized users VLAN ACL MAC-Filt
--------------------------------------------------------------------
4/1/12 2 2 no no no
Syntax: show dot1x mac-session brief
The following table describes the information displayed by the show dot1x mac-session brief
command.
Output from the show dot1x mac-session brief command
TABLE 20
Field
Description
Port
Information about the users connected to each port.
Number of users
The number of users connected to the port.
Number of Authorized users The number of users connected to the port that have been successfully
authenticated.
Dynamic VLAN
Whether the port is a member of a RADIUS-specified VLAN.
Dynamic Filters
Whether RADIUS-specified IP ACLs or MAC address filters have been applied to
the port.
Sample 802.1X configurations
This section illustrates a sample point-to-point configuration and a sample hub configuration that use
802.1X port security.
Displaying information about the ports in an 802.1X multiple-host configuration
210
FastIron Ethernet Switch Security Configuration Guide
53-1003088-03