OcNOS-SP : Layer 2 Guide : Layer 2 Command Reference : 802.1x Commands : show dot1x
show dot1x
Use this command to display the state of the whole system.
Command Syntax
show dot1x
show dot1x all
show dot1x host
show dot1x diagnostics interface IFNAME
show dot1x interface IFNAME
show dot1x sessionstatistics (interface IFNAME|)
show dot1x statistics interface IFNAME
Parameters
all
Display all information.
host
Show operational radius-server dot1x host information for a specific host (IPv4 address) or for all hosts.
diagnostics
Display diagnostics information.
interface
Display diagnostics interface information.
interface
Display interface information.
sessionstatistics
 
Display session statistics.
interface
Display session statistics interface information.
statistics
Display statistics information.
interface
Display statistics interface information.
Command Mode
Exec mode and Privileged Exec mode
Applicability
This command was introduced before OcNOS version 1.3.
Displayed Output
The following tables describes the output for the show dot1x all command and the show dot1x interface command.
 
Table 9-23: Port variables
Entry
Description
portEnabled
Interface operational status (Up-true/down-false)
portControl
Current control status of the port for 802.1x control
portStatus
802.1x status of the port (authorized/unauthorized)
reAuthenticate
Reauthentication enabled/disabled status on port
reAuthPeriod
Value holds meaning only if reAuthentication is enabled
 
Table 9-24: Supplicant PAE related global variables
Entry
Description
abort
Indicates that authentication should be aborted when set to true
fail
Indicates failed authentication attempt when set to false
start
Indicates authentication should be started when set to true
timeout
Indicates authentication attempt timed out when set to true
success
Indicates authentication successful when set to true
 
Table 9-25: 802.1x Operational State of Interface
Entry
Description
mode
Configured 802.1x mode
reAuthCount
Reauthentication count
quietperiod
Time between reauthentication attempts
reAuthMax
Maximum reauthentication attempts
 
Table 9-26: Backend Authentication state machine variables and constants
Entry
Description
state
State of the state machine
reqCount
Count of requests sent to server
suppTimeout
Supplicant timeout
serverTimeout
Server timeout
maxReq
Maximum requests to be sent
 
Table 9-27: Controlled Directions State machine
Entry
Description
adminControlledDirections
Administrative value (Both/In)
operControlledDirections
Operational Value (Both/In)
 
Table 9-28: KR -- Key receive state machine
Entry
Description
rxKey
True when EAPOL-Key message is received by supplicant or authenticator. false when key is transmitted
 
Table 9-29: Key Transmit State machine
Entry
Description
keyAvailable
False when key has been transmitted by authenticator, true when new key is available for key exchange
keyTxEnabled
Key transmission enabled/disabled status
Applicability
This command was introduced before OcNOS version 1.3.
Example
The following is an output of this command displaying the state of the system.
#show dot1x
% 802.1x authentication enabled
% Radius server address: 192.168.1.1.1812
% Radius client address: dhcp128.mySite.com.12103
% Next radius message id: 0
The following is an output of this command displaying detailed information for all ports.
#show dot1x all
% 802.1x authentication enabled
% Radius server address: 192.168.1.1.1812
% Radius client address: dhcp128.mySite.com.12103
% Next radius message id: 0
% Dot1x info for interface eth1 - 3
% portEnabled: true - portControl: auto
% portStatus: unauthorized - currentId: 11
% reAuthenticate: disabled
% abort:F fail:F start:F timeout:F success:F
% PAE: state: connecting - portMode: auto
% PAE: reAuthCount: 2 - rxRespId: 0
% PAE: quietPeriod: 60 - reauthMax: 2 - txPeriod: 30
% BE: state: idle - reqCount: 0 - idFromServer: 0
% BE: suppTimeout: 30 - serverTimeout: 30 - maxReq: 2
% CD: adminControlledDirections: in - operControlledDirections: in
% CD: bridgeDetected: false
% KR: rxKey: false
% KT: keyAvailable: false - keyTxEnabled: false
Last modified date: 07/06/2023