Displaying denied mac addresses – Brocade Communications Systems Brocade ICX 6650 6650 User Manual

Page 243

Advertising
background image

Brocade ICX 6650 Security Configuration Guide

223

53-1002601-01

Displaying information about MAC-based VLANs

Displaying denied MAC addresses

Enter the show table-mac-vlan denied-mac command to display information about denied
(authentication failed) MAC addresses.

Brocade(config)# show table-mac-vlan denied-mac
-------------------------------------------------------------------------------
MAC Address

Port

Vlan Authenticated Time

Age

dot1x

-------------------------------------------------------------------------------
0000.0030.1002

1/1/1

4092 No

00d00h11m57s H40

Dis

Syntax: show table-mac-vlan denied-mac

The following table describes the information in this output.

Vlan

The VLAN to which the MAC address has been assigned.

Authenticated

Yes indicates authentication has been successful.
Inp indicates authentication is in progress.

Time

The time at which each MAC address was authenticated. If the clock is set on the Brocade
device, then the actual date and time are displayed. If the clock has not been set, then the time
is displayed relative to when the device was last restarted.

Age

The age of the MAC address entry in the authenticated MAC address list.

Dot1x

Indicates whether 802.1X authentication is enabled or disabled for each MAC address.

TABLE 51

Output field description of show table-mac-vlan denied-mac command

Field

Description

MAC Address

The denied MAC address for which the information is displayed.

Port

The port where MAC-based VLAN is enabled.

Vlan

This field displays VLAN 4092 for blocked hosts, or the restricted VLAN ID if it is configured on
the port.

Authenticated

No indicates that authentication has failed.
Inp indicates that authentication is in progress.

Time

The time at which authenticated failed.

Age

The age of the MAC address entry in the authenticated MAC address list.

Dot1x

Indicates whether 802.1X authentication is disabled (Dis) or enabled (Ena) for this MAC address.

TABLE 50

Output field description of the show table-mac-vlan allowed-mac command

Field

Description

Advertising