beautypg.com

Authenticated mac addresses – Brocade FastIron Ethernet Switch Security Configuration Guide User Manual

Page 277

background image

0000.0000.0321 18/1 87 No 00d01h03m17s H52 Ena

0000.0000.0259 18/1 87 No 00d01h03m17s H52 Ena

0000.0000.0065 18/1 87 Yes 00d01h03m17s Ena Ena

0000.0000.0385 18/1 87 No 00d01h03m17s H52 Ena

0000.0000.0191 18/1 87 Yes 00d01h03m17s Ena Ena

0000.0000.02bd 18/1 87 No 00d01h03m17s H52 Ena

0000.0000.00c9 18/1 87 No 00d01h03m17s H52 Ena

000f.ed00.01f5 18/1 87 Yes 00d01h03m17s Ena Ena

Syntax: show auth-mac-address ethernet port

The following table explains the information in the output.

Output of show auth-mac-address

TABLE 32

Field

Description

MAC Address The MAC addresses learned on the port. If the packet for which multi-device port authentication

was performed also contained an IP address, the IP address is also displayed.

Port

ID of the port on which the MAC address was learned.

VLAN

VLAN of which the port is a member.

Authenticated Whether the MAC address has been authenticated by the RADIUS server.

Time

The time the MAC address was authenticated. If the clock is set on the Brocade device, then the
actual date and time are displayed. If the clock has not been set, the time is displayed relative to
when the device was last restarted.

Age

The age of the MAC address entry in the authenticated MAC address list.

Dot1x

Indicates if 802.1X authentication is enabled or disabled for the MAC address

Displaying multi-device port authentication settingsand authenticated
MAC addresses

To display the multi-device port authentication settings and authenticated MAC addresses for a port
where the feature is enabled, enter the following command.

Syntax: show auth-mac-address [ detail ] [ ethernet port ]

Omitting the ethernetport parameter displays information for all interfaces where the multi-device port
authentication feature is enabled.

device#show auth-mac-addresses detailed ethernet 15/23

Port : 15/23

Dynamic-Vlan Assignment : Enabled

RADIUS failure action : Block Traffic

Failure restrict use dot1x : No

Override-restrict-vlan : Yes

Port Default VLAN : 101 ( RADIUS assigned: No) (101)

Port Vlan State : DEFAULT

802.1x override Dynamic PVID : YES

override return to PVID : 101

Original PVID : 101

DOS attack protection : Disabled

Accepted Mac Addresses : 1

Rejected Mac Addresses : 0

Authentication in progress : 0

Displaying multi-device port authentication settingsand authenticated MAC addresses

FastIron Ethernet Switch Security Configuration Guide

277

53-1003088-03