Dot1x

Dot1x (or 802.1x) is an IEEE standard for network authentication. Devices supporting Dot1x allow the automatic provision and connection to the wireless network without launching a Web browser at login. When within range of a Dot1x network, a device automatically connects and authenticates without needing to manually login.

To view the Dot1x statistics:

  1. Select the Statistics menu from the Web UI.
  2. Expand the System node from the navigation pane (on the left-hand side of the screen). The System node expands to display the RF Domains created within the managed network.
  3. Expand the RF Domain node.
  4. Select a Wireless Controller.
  5. Select Dot1x from the left-hand side of the UI.
    The Statistics > Controller > Dot1x screen displays in the right-hand pane.
    Click to expand in new window
    Refer to the following Dot1xAuth statistics:
    AAA Policy Lists the AAA policy currently being utilized for authenticating user requests.
    Guest Vlan Control Lists whether guest VLAN control has been allowed (or enabled). This is the VLAN traffic is bridged on if the port is unauthorized and guest VLAN globally enabled. A green checkmark designates guest VLAN control as enabled. A red X defines guest VLAN control as disabled.
    System Auth Control Lists whether Dot1x authorization is globally enabled for the controller or service platform. A green checkmark designates Dot1x authorization globally enabled. A red X defines Dot1x as globally disabled.
    Review the following Dot1x Auth Ports utilization information:
    Name Lists the controller or service platform GE ports subject to automatic connection and authentication using Dot1x.
    Auth SM Lists whether Dot1x authentication is forced over the listed port.
    Auth VLAN Lists the numeric VLAN ID used as a virtual interface for authentication requests over the listed port.
    BESM Lists whether an authentication request is pending on the listed port.
    Client MAC Lists the MAC address of requesting clients seeking authentication over the listed port.
    Guest VLAN Lists the guest VLAN utilized for the listed port. This is the VLAN traffic is bridged on if the port is unauthorized and guest VLAN globally enabled.
    Host Lists whether the host is a single entity or not.
    Pstatus Lists whether the listed port has been authorized for Dot1x network authentication.

    Refer to the MacAuth table to assess the AAA policy applied to MAC authorization requests.

    Review the following MAC Auth Ports utilization information:
    Name Lists the controller or service platform GE ports subject to automatic connection and MAC authentication using Dot1x.
    Authorized Lists whether MAC authorization using Dot1x has been authorized (permitted) on the listed GE port. A green checkmark designates Dot1x authorization as authorized. A red X defines authorization as disabled.
    Enabled Lists whether MAC authorization using Dot1x has been or enabled)on the listed GE port. A green checkmark designates Dot1x authorization as allowed. A red X defines authorization as disabled.
    MAC Auth Lists the port‘s factory encoded MAC address.
  6. Select Refresh to update the screen‘s statistics counters to their latest value.