H3C Technologies H3C S6300 Series Switches - Manual (Page 175)

160
Supp Timeout 30 s, Server Timeout 100 s
Reauth Period 3600 s
Max attempts for sending an auth request 2
Max number of 802.1X users is 2048 per slot
Current number of online 802.1X users is 1
Ten-GigabitEthernet1/0/1 is link-up
802.1X protocol is enabled
Handshake is enabled
802.1X unicast-trigger is disabled
Periodic reauthentication is disabled
The port is an authenticator
Authentication mode is Auto
Port access control type is MAC-based
802.1X multicast-trigger is enabled
Mandatory authentication domain: Not configured
Max online users is 2048
EAPOL Packets: Tx 16331, Rx 102
Sent EAP Request/Identity Packets : 16316
EAP Request/Challenge Packets: 6
EAP Success Packets: 4, Fail Packets: 5
Received EAPOL Start Packets : 6
EAPOL LogOff Packets: 2
EAP Response/Identity Packets : 80
EAP Response/Challenge Packets: 6
Error Packets: 0
1. Authenticated user MAC address: 0002-0000-0011
Controlled Users: 1
Because NTK is enabled, frames with an unknown destination MAC address, multicast address, or
broadcast address are discarded.
Troubleshooting port security
Cannot set the port security mode
Symptom
Cannot set the port security mode for a port.
Analysis
For a port operating in a port security mode other than noRestrictions, you cannot change the port
security mode directly by using the port-security port-mode command.
Solution
1. Set the port security mode to noRestrictions.
[Device-Ten-GigabitEthernet1/0/1] undo port-security port-mode
2. Set a new port security mode for the port, for example, autoLearn.