display mac-authen

Function

The display mac-authen command displays information about MAC address authentication.

Format

display mac-authen [ interface { interface-type interface-number1 [ to interface-number2 ] } &<1-10> | configuration ]

Parameters

Parameter	Description	Value
interface { interface-type interface-number1 [ to interface-number2 ] }	Displays MAC authentication information of a specified interface. interface-type specifies the interface type. interface-number specifies the interface number. If this parameter is not specified, MAC authentication information of all interfaces is displayed.	-
configuration	Displays the global information about MAC address authentication.	-

Parameter

Description

Value

interface { interface-type interface-number1 [ to interface-number2 ] }

Displays MAC authentication information of a specified interface.

interface-type specifies the interface type.
interface-number specifies the interface number.

If this parameter is not specified, MAC authentication information of all interfaces is displayed.

configuration

Displays the global information about MAC address authentication.

Views

All views

Default Level

1: Monitoring level

Usage Guidelines

Usage Scenario

You can run the display mac-authen command to view configuration results of all configuration commands in MAC address authentication. The command output helps you to check whether the MAC address authentication configuration is correct and isolate faults accordingly.

Follow-up Procedure

You can locate the fault according to the packet statistics that is displayed using the display mac-authen command. When the fault is rectified, run the reset mac-authen statistics command to clear the packet statistics. After a period of time, run the display mac-authen command again to check the packet statistics. If no error packet is found, the fault is rectified.

Example

# Display the configuration of MAC address authentication.

<HUAWEI> display mac-authen
  Quiet period is 60s
  Authentication fail times before quiet is 1
  Maximum users: 16384
  Current users: 1
  Global default domain is default

 GigabitEthernet0/0/1 state: UP.  MAC address authentication is enabled
  MAC access profile is mac_access_profile
  Reauthentication is disabled
  Current users: 1
  Username format: fixed username: gcs
  Password type: cipher
  Authentication Success: 22, Failure: 85
  0 silent mac address(es) found, 0 printed.

 Online user(s) info:
 UserId   MAC/VLAN            AccessTime              UserName
 ------------------------------------------------------------------------------
 37223    a088-b44d-573c/2003 2014/09/28 15:45:45     gcs
 ------------------------------------------------------------------------------
 Total: 1, printed: 1

**Table 1** Description of the **display mac-authen** command output
Item	Description
Quiet period	Quiet period during which the device quiets a user who fails to be authenticated. The default value of the quiet timer is 60 seconds. To configure the quiet period, run the mac-authen timer quiet-period command.
Authentication fail times before quiet	Maximum number of authentication failures before the device quiets a user. To configure the maximum value, run the mac-authen quiet-times command.
Maximum users	Maximum number of users allowed on the device.
Current users	Number of online users, the value varies according to device models.
Global default domain	Global default authentication domain. To configure the global default authentication domain, run the domain command.
interface state	Interface status: UP: The interface is enabled. DOWN: The interface is shut down.
MAC address authentication	Whether MAC address authentication is enabled on the interface. enabled disabled
MAC access profile	MAC access profile name. To configure the MAC access profile name, run the mac-access-profile command.
Reauthentication	Whether re-authentication for MAC address authentication users is enabled. enabled disabled To configure whether re-authentication for MAC address authentication users is enabled, run the mac-authen reauthenticate command.
Current users	Number of current online users on the interface.
Username format	User name format for MAC address authentication. use MAC address without-hyphen as username: A user name is a MAC address that does not contain hyphens (-), for example, 0005e01c02e3. use MAC address with-hyphen as username: A user name is a MAC address that contains hyphens (-) and the hyphens are inserted between every four digits, for example, 0005-e01c-02e3. use MAC address with-hyphen normal as username: A user name is a MAC address that contains hyphens (-) and the hyphens are inserted between every two digits, for example, 00-05-e0-1c-02-e3. use MAC address without-hyphen upper as username: A user name is a MAC address in the uppercase format that does not contain hyphens (-), for example, 0005E01C02E3. use MAC address with-hyphen upper as username: A user name is a MAC address in the uppercase format that contains hyphens (-) and the hyphens are inserted between every four digits, for example, 0005-E01C-02E3. use MAC address with-hyphen normal upper as username: A user name is a MAC address in the uppercase format that contains hyphens (-) and the hyphens are inserted between every two digits, for example, 00-05-E0-1C-02-E3. use MAC address with-hyphen colon as username: A user name is a MAC address that contains colons (:) and the colons are inserted between every four digits, for example, 0005:e01c:02e3. use MAC address with-hyphen normal colon as username: A user name is a MAC address that contains colons (:) and the colons are inserted between every two digits, for example, 00:05:e0:1c:02:e3. use MAC address with-hyphen colon upper as username: A user name is a MAC address in the uppercase format that contains colons (:) and the colons are inserted between every four digits, for example, 0005:E01C:02E3. use MAC address with-hyphen normal colon upper as username: A user name is a MAC address in the uppercase format that contains colons (:) and the colons are inserted between every two digits, for example, 00:05:E0:1C:02:E3. fixed username: The user name is fixed. use option82 as username: The content of the Option 82 field is used as the user name. not configured: The user name format is not configured. To configure the user name format for MAC address authentication, run the mac-authen username command.
Password type	Password display mode for MAC address authentication. cipher To configure the password display mode for MAC address authentication, run the mac-authen username command.
Authentication Success: m, Failure: n	Numbers of successful authentications (m) and failed authentications (n) on the interface.
m silent mac address(es) found, n printed	Numbers of successful authentications (m) and failed authentications (n) on the interface.
Online user(s) info	Online user information. UserId: ID of an online user. MAC/VLAN: MAC address and VLAN of an online user. AccessTime: access time of an online user. UserName: name of an online user. Total: total number of online users. printed: number of displayed online users.