beautypg.com

H3C Technologies H3C S6300 Series Switches User Manual

Page 174

background image

159

[Device] display port-security interface ten-gigabitethernet 1/0/1

Port security is enabled globally

AutoLearn aging time is 0 minutes

Disableport Timeout: 20s

OUI value:

Ten-GigabitEthernet1/0/1 is link-up

Port mode: macAddressElseUserLoginSecure

NeedToKnow mode: NeedToKnowOnly

Intrusion protection mode: NoAction

Max number of secure MAC addresses: 64

Current number of secure MAC addresses: 0

Authorization is permitted

After users pass authentication, you can use the following commands to display the user authentication

information on the port:
# Display MAC authentication information.

[Device] display mac-authentication interface ten-gigabitethernet 1/0/1

MAC address authentication is enabled

User name format is MAC address in uppercase, like XX-XX-XX-XX-XX-XX

Fixed username: mac

Fixed password: Not configured

Offline detect period is 60s

Quiet period is 5s

Server response timeout value is 100s

Max number of users is 2048 per slot

Current number of online users is 3

Current authentication domain is sun

Silent MAC user info:

MAC Addr VLAN ID From Port Port Index

Ten-GigabitEthernet1/0/1 is link-up

MAC address authentication is enabled

Max number of online users is 2048

Current number of online users is 3

Current authentication domain: Not configured

Authentication attempts: successful 3, failed 7

MAC Addr Auth state

1234-0300-0011 authenticated

1234-0300-0012 authenticated

1234-0300-0013 authenticated

# Display 802.1X authentication information.

[Device] display dot1x interface ten-gigabitethernet 1/0/1

802.1X protocol is enabled globally

CHAP authentication is enabled

Configuration: Transmit Period 30 s, Handshake Period 15 s

Quiet Period 60 s, Quiet Timer is disabled