Fortinet Document Library

Version:

Version:

Version:

Version:


Table of Contents

Administration Guide

Download PDF
Copy Link

Viewing the 802.1x details

Using the GUI:

Go to Switch >Monitor > 802.1x Status.

Using the CLI:

Use the following command to show diagnostics on one or all ports:

diagnose switch 802-1x status [<port>]

 

port3 : Mode: port-based (MAC by-pass disable)
	Link: Link up
	Port State: authorized
	Dynamic Authorized Vlan: 10
	Native vlan: 10
	Allowed vlan list: 1-10
	Untagged vlan list:
	Guest vlan: 
	AuthFail vlan: 

	Sessions info:
	STA=00:24:9b:1b:20:65 Type=802.1X EAP PEAP state=AUTHENTICATED

port7 : Mode: mac-based (mac-by-pass disable) 
	Link: Link up
	Port State: authorized ( ) 
	EAP pass-through mode : Enable
	Native Vlan : 1
	Allowed Vlan list: 1
	Untagged Vlan list: 1
	Guest VLAN :

	Client MAC Type Vlan Dynamic-Vlan
	0a:0a:0b:0b:0a:0a 802.1x 1 0
	0a:0a:0b:0b:0a:09 802.1x 1 0
	0a:0a:0b:0b:0a:08 802.1x 1 0
	0a:0a:0b:0b:0a:07 802.1x 1 0
	0a:0a:0b:0b:0a:06 802.1x 1 0
	0a:0a:0b:0b:0a:05 802.1x 1 0
	0a:0a:0b:0b:0a:04 802.1x 1 0
	0a:0a:0b:0b:0a:03 802.1x 1 0
	0a:0a:0b:0b:0a:02 802.1x 1 0
	0a:0a:0b:0b:0a:01 802.1x 1 0

	Sessions info:
	0a:0a:0b:0b:0a:0a Type=802.1x,MD5,state=AUTHENTICATED,etime=2,eap_cnt=3 params:reAuth=3600
	0a:0a:0b:0b:0a:09 Type=802.1x,MD5,state=AUTHENTICATED,etime=2,eap_cnt=3 params:reAuth=3600
	0a:0a:0b:0b:0a:08 Type=802.1x,MD5,state=AUTHENTICATED,etime=2,eap_cnt=3 params:reAuth=3600
	0a:0a:0b:0b:0a:07 Type=802.1x,MD5,state=AUTHENTICATED,etime=2,eap_cnt=3 params:reAuth=2896
	0a:0a:0b:0b:0a:06 Type=802.1x,MD5,state=AUTHENTICATED,etime=2,eap_cnt=3 params:reAuth=3600
	0a:0a:0b:0b:0a:05 Type=802.1x,MD5,state=AUTHENTICATED,etime=2,eap_cnt=3 params:reAuth=3600
	0a:0a:0b:0b:0a:04 Type=802.1x,MD5,state=AUTHENTICATED,etime=2,eap_cnt=3 params:reAuth=3600
	0a:0a:0b:0b:0a:03 Type=802.1x,MD5,state=AUTHENTICATED,etime=2,eap_cnt=3 params:reAuth=3600
	0a:0a:0b:0b:0a:02 Type=802.1x,MD5,state=AUTHENTICATED,etime=2,eap_cnt=3 params:reAuth=3600
	0a:0a:0b:0b:0a:01 Type=802.1x,MD5,state=AUTHENTICATED,etime=2,eap_cnt=3 params:reAuth=3600h=120

Viewing the 802.1x details

Using the GUI:

Go to Switch >Monitor > 802.1x Status.

Using the CLI:

Use the following command to show diagnostics on one or all ports:

diagnose switch 802-1x status [<port>]

 

port3 : Mode: port-based (MAC by-pass disable)
	Link: Link up
	Port State: authorized
	Dynamic Authorized Vlan: 10
	Native vlan: 10
	Allowed vlan list: 1-10
	Untagged vlan list:
	Guest vlan: 
	AuthFail vlan: 

	Sessions info:
	STA=00:24:9b:1b:20:65 Type=802.1X EAP PEAP state=AUTHENTICATED

port7 : Mode: mac-based (mac-by-pass disable) 
	Link: Link up
	Port State: authorized ( ) 
	EAP pass-through mode : Enable
	Native Vlan : 1
	Allowed Vlan list: 1
	Untagged Vlan list: 1
	Guest VLAN :

	Client MAC Type Vlan Dynamic-Vlan
	0a:0a:0b:0b:0a:0a 802.1x 1 0
	0a:0a:0b:0b:0a:09 802.1x 1 0
	0a:0a:0b:0b:0a:08 802.1x 1 0
	0a:0a:0b:0b:0a:07 802.1x 1 0
	0a:0a:0b:0b:0a:06 802.1x 1 0
	0a:0a:0b:0b:0a:05 802.1x 1 0
	0a:0a:0b:0b:0a:04 802.1x 1 0
	0a:0a:0b:0b:0a:03 802.1x 1 0
	0a:0a:0b:0b:0a:02 802.1x 1 0
	0a:0a:0b:0b:0a:01 802.1x 1 0

	Sessions info:
	0a:0a:0b:0b:0a:0a Type=802.1x,MD5,state=AUTHENTICATED,etime=2,eap_cnt=3 params:reAuth=3600
	0a:0a:0b:0b:0a:09 Type=802.1x,MD5,state=AUTHENTICATED,etime=2,eap_cnt=3 params:reAuth=3600
	0a:0a:0b:0b:0a:08 Type=802.1x,MD5,state=AUTHENTICATED,etime=2,eap_cnt=3 params:reAuth=3600
	0a:0a:0b:0b:0a:07 Type=802.1x,MD5,state=AUTHENTICATED,etime=2,eap_cnt=3 params:reAuth=2896
	0a:0a:0b:0b:0a:06 Type=802.1x,MD5,state=AUTHENTICATED,etime=2,eap_cnt=3 params:reAuth=3600
	0a:0a:0b:0b:0a:05 Type=802.1x,MD5,state=AUTHENTICATED,etime=2,eap_cnt=3 params:reAuth=3600
	0a:0a:0b:0b:0a:04 Type=802.1x,MD5,state=AUTHENTICATED,etime=2,eap_cnt=3 params:reAuth=3600
	0a:0a:0b:0b:0a:03 Type=802.1x,MD5,state=AUTHENTICATED,etime=2,eap_cnt=3 params:reAuth=3600
	0a:0a:0b:0b:0a:02 Type=802.1x,MD5,state=AUTHENTICATED,etime=2,eap_cnt=3 params:reAuth=3600
	0a:0a:0b:0b:0a:01 Type=802.1x,MD5,state=AUTHENTICATED,etime=2,eap_cnt=3 params:reAuth=3600h=120