Brocade BigIron RX Series Configuration Guide User Manual

Page 1143

Advertising
background image

BigIron RX Series Configuration Guide

1065

53-1002484-04

Displaying 802.1x information

34

Syntax: show dot1x

The following table describes the information displayed by the show dot1x command.

TABLE 172

Output from the show dot1x command

This field...

Displays...

PAE Capability

The Port Access Entity (PAE) role for the BigIron RX device. This is always
“Authenticator Only”.

system-auth-control

Whether system authentication control is enabled on the device. The
dot1x-enable command enables system authentication control on the
device.

Number of ports enabled

Number of interfaces on the devices that have been enabled for 802.1x.

re-authentication

Whether periodic re-authentication is enabled on the device. Refer to

“Configuring periodic re-authentication”

on page 1060.

When periodic re-authentication is enabled, the device automatically
re-authenticates Clients every 3,600 seconds by default.

global-filter-strict-security

Whether or not strict security mode is enabled globally.

global-filter-strict-security:

Whether strict security mode is enabled or disabled globally. See

“Disabling and enabling strict security mode for dynamic filter
assignment”

on page 1056.

quiet-period

When the BigIron RX is unable to authenticate a Client, the amount of
time the BigIron RX waits before trying again (default 60 seconds).
Refer to

“Setting the quiet period”

on page 1061 for information on how

to change this setting.

tx-period

When a Client does not send back an EAP-response/identity frame, the
amount of time the BigIron RX waits before retransmitting the
EAP-request/identity frame to a Client (default 30 seconds).
Refer to

“Setting the interval for retransmission of EAP-request/ identity

frames”

on page 1061 for information on how to change this setting.

supp-timeout

When a Client does not respond to an EAP-request frame, the amount of
time before the BigIron RX retransmits the frame.
Refer to

“Specifying a timeout for retransmission of EAP-request frames

to the client”

on page 1062 for information on how to change this

setting.

BigIron RX# show dot1x

PAE Capability : Authenticator Only

system-auth-control : Enable

Number of ports enabled : 25

re-authentication : Disable

global-filter-strict-security: Enable

quiet-period : 60 Seconds

tx-period : 30 Seconds

supptimeout : 30 Seconds

servertimeout : 30 Seconds

maxreq : 3

re-authperiod : 3600 Seconds

Protocol Version : 1

auth-fail-action : Block Traffic

MAC Session Aging : All

MAC Session Max Age : 120 Seconds

Maximum Failed Attempts : 3

Advertising