beautypg.com

Displaying the authenticated mac addresses, Displaying the non-authenticated mac addresses – Brocade FastIron Ethernet Switch Security Configuration Guide User Manual

Page 276

background image

Output from the show authenticated-mac-address address command (Continued)

TABLE 31

Field

Description

CAM Index

If the MAC address is blocked, this is the index entry for the Layer 2 CAM entry created for this
MAC address. If the MAC address is not blocked, either through successful authentication or
through being placed in the restricted VLAN, then "N/A" is displayed. If the hardware aging
period has expired, then "ffff" is displayed for the MAC address during the software aging period.

Displaying the authenticated MAC addresses

To display the MAC addresses that have been successfully authenticated, enter the show auth-mac-
addresses authorized-mac
command.

The following example output is from a FastIron X Series device. The display output on your device
may differ, depending on the software version running on the device.

device#show auth-mac-addresses authorized-mac

-------------------------------------------------------------------------------

MAC Address Port Vlan Authenticated Time Age dot1x

-------------------------------------------------------------------------------

0000.0074.3181 15/23 101 Yes 00d01h03m17s Ena Ena

0000.0000.0001 18/1 87 Yes 00d01h03m17s Ena Ena

0000.0000.012d 18/1 87 Yes 00d01h03m17s Ena Ena

0000.0000.0065 18/1 87 Yes 00d01h03m17s Ena Ena

0000.0000.0191 18/1 87 Yes 00d01h03m17s Ena Ena

0000.0000.01f5 18/1 87 Yes 00d01h03m17s Ena Ena

Syntax: show auth-mac-addresses authorized-mac

Displaying the non-authenticated MAC addresses

To display the MAC addresses for which authentication was not successful, enter the show auth-
mac-addresses unauthorized-mac
command

device#show auth-mac-addresses unauthorized-mac

-------------------------------------------------------------------------------

MAC Address Port Vlan Authenticated Time Age dot1x

-------------------------------------------------------------------------------

0000.0000.0321 18/1 87 No 00d01h03m17s H44 Ena

0000.0000.0259 18/1 87 No 00d01h03m17s H44 Ena

0000.0000.0385 18/1 87 No 00d01h03m17s H44 Ena

0000.0000.02bd 18/1 87 No 00d01h03m17s H44 Ena

0000.0000.00c9 18/1 87 No 00d01h03m17s H44 Ena

Syntax: show auth-mac-addresses unauthorized-mac

The Output of show auth-mac-address table explains the information in the output.

Displaying multi-device port authentication information for a port

To display a summary of Multi-Device Port Authentication for ports on a device, enter the following
command

device#show auth-mac-addresses ethernet 18/1

--------------------------------------------------------------

MAC Address Port Vlan Authenticated Time Age Dot1x

--------------------------------------------------------------

0000.0000.0001 18/1 87 Yes 00d01h03m17s Ena Ena

0000.0000.012d 18/1 87 Yes 00d01h03m17s Ena Ena

Displaying the authenticated MAC addresses

276

FastIron Ethernet Switch Security Configuration Guide

53-1003088-03