Display the Current EAP-Based Security Status
Use the following procedure to display the status of the EAP-based security.
Procedure
Examples
Switch:>enable Switch:1#config terminal Switch:1(config)#interface gigabitEthernet 1/2 Switch:1(config-if)#show eapol port 1/2 ================================================================================================================================================================================= Eapol Configuration ================================================================================================================================================================================= PORT STATUS OPER DYN Flex-UNI MAX QUIET REAUTH REAUTH NON-EAP LLDP-AUTH MAX MAX MAX GST GST FAIL FAIL COA ADMIN OPER TRAFFIC ORIGIN NUM MODE MHSA ENABLE REQ INTVL PERIOD ENABLE ENABLE ENABLE MAC EAP NEAP VLAN I-SID VLAN I-SID ENABLE TRAFFIC TRAFFIC CONTROL CONTROL CONTROL ORIGIN =================================================================================================================================================================================== 1/2 Auth MHMV false false 2 60 3600 false false false 2 2 2 N/A N/A N/A N/A false in-out in-out CONFIG AUTO-SENSE ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- ======================================================== Eapol Configuration ======================================================== PORT REAUTH REAUTH REAUTH REAUTH ORIGIN NUM ENABLE ORIGIN PERIOD PERIOD ORIGIN ======================================================== 1/2 false CONFIG 3600 CONFIG AUTO-SENSE --------------------------------------------------------
Switch:>enable Switch:1#config terminal Switch:1(config)#show eapol sessions eap verbose ================================================================================================= Eap Oper Status Verbose ================================================================================================= PORT MAC PAE VLAN PRI Flex-UNI I-SID VLAN:I-SID ACL ACEs RADIUS DYNAMIC NUM STATUS ID Enable SOURCE SETTINGS ------------------------------------------------------------------------------------------------- 1/13 00:00:11:11:16:02 authenticated 111 1 false n/a DHCPSNOOP, DAI 1/13 00:00:11:11:16:03 authenticated 111 1 false n/a DHCPSNOOP
Switch:>enable Switch:1#config terminal Switch:1(config)#show eapol sessions neap verbose ================================================================================================= Non-Eap Oper Status Verbose ================================================================================================= PORT MAC STATE VLAN PRI Flex-UNI I-SID NON-EAP VLAN:I-SID ACL ACEs RADIUS DYNAMIC NUM ID Enable SOURCE AUTH SETTINGS ------------------------------------------------------------------------------------------------- 1/15 00:00:00:00:00:15 authenticated 1 0 false n/a radius IPSG, DHCPSNOOP, DAI, IGMPSNOOP 1/15 00:00:00:00:00:16 authenticated 1 0 false n/a radius BPDU, SLPPGUARD, WOL, AN-ADVERTISEMENTS:100F ------------------------------------------------------------------------------------------------- Total Number of NEAP Sessions: 2
![Note](images/note.png)
Note
Product Notice: auto-isid-offset functionality is not available on VSP 4450 Series, VSP 8600 Series, or XA1400 Series.
Switch:1>show eapol system ================================================================================ Eapol System ================================================================================ eap : disabled Eapol Version : 3 non-eap-pwd-fmt : mac-addr non-eap-pwd-fmt key : ****** non-eap-pwd-fmt padding : disabled auto-isid-offset status : disabled auto-isid-offset value : 1000
Variable Definitions
The following table defines parameters for the show eapol command.
Variable |
Value |
---|---|
auth-stats [gigabitEthernet {slot/port[/sub-port] [-slot/port[/sub-port]] [,...]}] |
Displays the authentication statistics interface. Note:
auth-stats [gigabitEthernet {slot/port[/sub-port] [-slot/port[/sub-port]] [,...]}] is useful only for EAP supplicants. The command output changes only when the EAP supplicant tries to access the network. |
multihost non-eap-mac status [vlan <1-4059>] [{slot/port[/sub-port] [-slot/port[/sub-port]] [,...]}] Note:
Exception: This parameter applies to VSP 8600 Series only. |
Displays EAP multihost configuration. |
port {interface [gigabitEthernet {slot/port[/sub-port] [-slot/port[/sub-port]] [,...]}] | {slot/port[/sub-port] [-slot/port[/sub-port]] [,...]}} |
Specifies the ports to display. If no port is entered, all ports are displayed. |
session-stats interface [gigabitEthernet {slot/port[/sub-port] [-slot/port[/sub-port]] [,...]}] |
Displays the authentication session statistics interface. |
sessions {eap | neap} [vlan<1-4059>] [{slot/port[/sub-port] [-slot/port[/sub-port]] [,...]}] [verbose] Note:
Exception: This parameter does not apply to VSP 8600 Series or XA1400 Series. |
Displays EAP and non-EAP authentication sessions on the port. |
status interface [vlan <1-4059>] [gigabitEthernet {slot/port[/sub-port] [-slot/port[/sub-port]] [,...]}] Note:
Exception: This parameter applies to VSP 8600 Series only. |
Displays the port EAP operation statistics. |
summary port[{slot/port[/sub-port] [-slot/port[/sub-port]] [,...]}] |
Displays EAP and NEAP clients. |
system |
Displays EAP settings. |