display dot1x

Function

The display dot1x command displays configuration information about 802.1X authentication on an interface.

Format

display dot1x [ interface { interface-name | interface-type interface-number } ]

Parameters

Parameter	Description	Value
interface interface-name	Specifies the interface name.	The value is a string of 1 to 256 characters.
interface interface-type	Specifies the interface type.	-
interface interface-number	Specifies the interface number.	The value is a string of 1 to 256 characters.

Parameter

Description

Value

interface interface-name

Specifies the interface name.

The value is a string of 1 to 256 characters.

interface interface-type

Specifies the interface type.

interface interface-number

Specifies the interface number.

The value is a string of 1 to 256 characters.

Views

All views

Default Level

1: Monitoring level

Task Name and Operations

Task Name	Operations
bas-eap	read

Usage Guidelines

Usage Scenario

You can run this command to check whether 802.1X authentication is enabled, the access authentication mode, access control type, maximum number of access users on an interface, forcible authentication domain on an interface, and current authorization status of an interface. The command output helps you to check whether the current 802.1x authentication configuration is correct and locate and rectify faults accordingly.

Precautions

In VS mode, this command is supported only by the admin VS.

Example

The actual command output varies according to the device. The command output here is only an example.

# Display configuration information about 802.1X authentication on GE0/1/1.

<HUAWEI> display dot1x interface GigabitEthernet 0/1/1
GigabitEthernet0/1/1 
  Dot1x authentication         : enable               
  Port control type            : auto                  
  Port control method          : mac                   
  Max user num                 : 64                 
  Forced-domain                : --                    
  Port current status          : un-authorized         
  Port current access user num : 0

**Table 1** Description of the **display dot1x** command output
Item	Description
Dot1x authentication	Whether 802.1X authentication is enabled. The value can be: enable: 802.1X authentication is enabled. disable: 802.1X authentication is disabled.
Port control method	Access authorization mode of the interface on which 802.1X authentication is configured. The value can be: port: The interface-based access control mode is used. mac: The MAC address-based access control mode is used.
Port control type	Access control type of the interface on which 802.1X authentication is configured. The value can be: auto: Initially, an interface is in the unauthorized status and allows only EAPOL packets of users to pass through and does not allow users to access network resources. After the users pass 802.1X authentication, the interface switches to the authorized status and the users can access network resources. authorized-force: The interface is in the authorized status and allows users to access network resources without being authenticated and authorized. unauthorized-force: The interface is in the unauthorized status and does not allow users to be authenticated. The device does not provide authentication services for access users on the interface.
Port current status	Current authorization status of an interface. The value can be: authorized: The interface is in the authorized status. un-authorized: The interface is in the unauthorized status.
Port current access user num	Current number of access users on an interface.
Max user num	Maximum number of access users on an interface. You can configure this item using the dot1x max-user command.
Forced-domain	Forcible authentication domain.