/
run show dot1x interface

run show dot1x interface


The run show dot1x interface command displays the configuration information and port status of 802.1X authentication function.


Command Syntax

run show dot1x interface [gigabit-ethernet <interface-name>]


Parameter

Parameter

Description

gigabit-ethernet <interface-name>

Optional. Specifies the physical interface name. The value is a string.


Example

  •   Run run show dot1x interface gigabit-ethernet <interface-name> command to view the detailed information of 802.1X of interface ge-1/1/1.


admin@XorPlus# run show dot1x interface gigabit-ethernet ge-1/1/1
Dot1x Info for ge-1/1/1
------------------------------
PortEnabled = true
PortControl = AUTO
QuietPeriod = 60
ServerTimeout = 12
ReAuthentication = true
ReAuthPeriod = 3600
Dot1x Authenticator Client
--------------------------
Supplicant = 08:9e:01:39:1a:fe
Port Status = AUTHORIZED
Auth SM State = AUTHENTICATED
Auth BEND SM State = IDLE


  • Run run show dot1x interface command to view the brief information of 802.1X authentication.
admin@XorPlus# run show dot1x interface
Interface      Client             Status           
------------------------------------------------------------
ge-1/1/1     08:9e:01:39:1a:fe    AUTHORIZED


Table. Description of the run show dot1x interface command output

Item

Description

PortEnabled

Indicates whether the 802.1X authentication is enabled.

  •   true: indicates the 802.1X authentication is enabled.
  •   false: indicates the 802.1X authentication is disabled.

PortControl

The port control mode. The value could be auto, force-authorized or force-unauthorized.

  •   auto: The initial state of the interface is un-authorized. Only the EAPOL packets are allowed to be sent and received. The user is not allowed to access the network resources. After a user passes the authentication, the interface turns to authorized state and the user is allowed to access the network resources in this state.
  •   force-authorized: The interface is always in Authorized state and allows users to access network resources without authentication.
  •   force-unauthorized: The interface is always in Un-authorized state and does not allow users to access network resources.

The default port control mode is auto.

QuietPeriod

Value of the quiet timer of the client when the 802.1X authentication fails. The value is fixed to 60 seconds.

ServerTimeout

Timeout interval of the authentication server. The value is fixed to 12 seconds.

ReAuthentication

Indicates whether the re-authentication function is enabled.

  •   true: indicates the re-authentication authentication is enabled.
  •   false: indicates the re-authentication authentication is disabled.

By default, the re-authentication function is disabled.

ReAuthPeriod

Indicates the re-authentication period.

Supplicant

The MAC address of the supplicant.

Port Status

Indicates the authorization state of the interface.

Auth SM State

Authenticator PAE state machine under 802.1X authentication mode. It has the following values:

"INITIALIZE";

"DISCONNECTED";

"CONNECTING";

"AUTHENTICATING";

"AUTHENTICATED";

"ABORTING";

"HELD";

"FORCE-AUTH";

"FORCE-UNAUTH".

Auth BEND SM State

Backend authentication state machine under 802.1X authentication mode. It has the following values:

"REQUEST";

"RESPONSE";

"SUCCESS";

"FAIL";

"TIMEOUT";

"IDLE";

"INITIALIZE".

Interface

Indicates the physical port of the switch.

Client

The MAC address of the Client.

Status

Indicates the authorization state of the interface.

Copyright © 2025 Pica8 Inc. All Rights Reserved.