display dot1x sessions

Function

The display dot1x sessions command displays information about 802.1X sessions.

Format

display dot1x sessions { slot slot-num | interface interface-type interface-name | mac mac-address }

display dot1x sessions { slot slot-num | interface interface-type interface-name } mac mac-address

display dot1x sessions

Parameters

Parameter Description Value
slot slot-num

Specifies the slot ID of an installed board based on which information about 802.1X sessions is to be displayed.

The value is a string of 1 to 15 characters.

interface interface-type

Specifies the type of an interface based on which information about 802.1X sessions is to be displayed.

-

mac mac-address

Specifies a MAC address based on which information about 802.1X sessions is to be displayed.

The value is in the format of H-H-H. Each H is a 4-bit hexadecimal number, such as 00e0 or fc01.

Views

All views

Default Level

1: Monitoring level

Task Name and Operations

Task Name Operations
bas-eap read

Usage Guidelines

Usage Scenario

To check information about 802.1X sessions, including the MAC address, user status, and VLAN ID, run the display dot1x sessions command.

Precautions

In VS mode, this command is supported only by the admin VS.

Example

The actual command output varies according to the device. The command output here is only an example.

# Display information about 802.1X sessions for a specified MAC address.
<HUAWEI> display dot1x sessions mac 00e0-fc12-3456
---------------------------------------------------------------------------------------------------------------------------------------
 UserIndex  Interface    Mac              State              VlanId      QinqId   Dot1x-template  Handshake  Reauthentication   MacBypassVlan
---------------------------------------------------------------------------------------------------------------------------------------------

 65664       GE0/1/19     00e0-fc12-3456   authenticated      0           0        1               disable    enable             -
---------------------------------------------------------------------------------------------------------------------------------------------
Table 1 Description of the display dot1x sessions command output
Item Description
UserIndex

EAP user index.

Interface

Type of the interface on the user side.

Mac

User MAC address.

State

Current EAPoL state machine status of a user:

  • Idle: idle.
  • Initial: initializing.
  • Connecting: connecting.
  • response: waiting for an authentication response.
  • request: processing Challenge messages.
  • authenticated: successfully authenticated.
  • held: user logout.
VlanId

User VLAN ID.

QinqId

Inner VLAN ID or outer VLAN ID of a QinQ interface.

Dot1x-template

Dot1x template index.

Handshake

Whether the 802.1X handshake function is enabled using the request command:

  • enable: The function is enabled.
  • disable: The function is disabled.
Reauthentication

Whether reauthentication is enabled:

  • enable: The function is enabled.
  • disable: The function is disabled.
MacBypassVlan

Whether VLAN information carried in the upstream traffic of the MAC address bypass authentication user is replaced by the configured VLAN. - indicates that VLAN information is not replaced.

Copyright © Huawei Technologies Co., Ltd.
Copyright © Huawei Technologies Co., Ltd.
< Previous topic Next topic >