beautypg.com

Brocade BigIron RX Series Configuration Guide User Manual

Page 1096

background image

1018

BigIron RX Series Configuration Guide

53-1002484-04

Displaying multi-device port authentication information

32

The following table describes the information displayed by the show authenticated-mac-address
configuration command.

TABLE 161

Output from the show auth-mac-address configuration command

This field...

Displays...

Feature enabled

Whether the multi-device port authentication feature is enabled on the
device.

Number of Ports enabled

The number of ports on which the multi-device port authentication
feature is enabled.

Aging

Shows which MAC addresses are aged out.
Denied – Only denied MAC addresses are aged out
Permitted – Only permitted MAC addresses are aged out
All – Both denied and permitted MAC addresses are aged out
None – None of the MAC addresses are aged out

Port

Information for each multi-device port authentication-enabled port.

Fail-Action

What happens to traffic from a MAC address for which RADIUS
authentication has failed: either block the traffic or assign the MAC
address to a restricted VLAN.

Fail VLAN

The restricted VLAN to which non-authenticated MAC addresses are
assigned, if the Fail-Action is to assign the MAC address to a restricted
VLAN.

DynVLAN Support

Whether RADIUS dynamic VLAN assignment is enabled for the port.

Override Restricted

Whether or not a port in a restricted VLAN (due to a failed
authentication) is removed from the restricted VLAN on a subsequent
successful authentication on the port.

Revert VLAN

The VLAN that the port reverts to when the RADIUS-assigned dynamic
VLAN expires.

BigIron RX# show auth-mac configuration

Feature enabled : Yes

Global Fail-VLAN Id : None

Username/Password format : xxxx.xxxx.xxxx

Maximum Age : 120

Save dynamic VLAN configuration : No

Number of Ports enabled : 25

--------------------------------------------------------------------------------

-

Port Aging Fail Fail DynVLAN Override Revert MAC DoS Protectn

Action VLAN Support Restricted VLAN Filter Enable Limit

--------------------------------------------------------------------------------

--

1/1 All Blocked N/A Yes Yes Configured No No 512

1/2 Permitted Blocked 101 No Yes Restricted No No 512

1/3 All Blocked N/A Yes Yes Configured No No 512

1/4 Denied Blocked N/A Yes Yes Configured No No 512

1/5 All Blocked N/A Yes Yes Configured No No 512

1/6 None Blocked N/A Yes Yes Sys.Default No No 512

1/7 All Blocked N/A Yes Yes Configured No No 512

1/8 All Blocked N/A Yes Yes Configured No No 512

1/9 All Blocked N/A Yes Yes Configured No No 512

1/10 All Blocked N/A Yes Yes Configured No No 512