Viewing the 802.1X details
Using the GUI:
Go to Switch >Monitor > 802.1x Status.
Click the interface name to display the Session page.
Using the CLI:
Use the following command to show diagnostics on one or all ports:
diagnose switch 802-1x status [<port>]
For example:
diagnose switch 802-1x status port3 port3: Mode: mac-based (mac-by-pass enable) Link: Link up Port State: authorized: ( ) Dynamic Allowed Vlan list: 101 Dynamic Untagged Vlan list: 101 EAP pass-through : Enable Auth Order : MAB-dot1x Auth Priority : Legacy EAP egress-frame-tagged : Enable EAP auto-untagged-vlans : Enable Allow MAC Move : Disable Dynamic Access Control List : Disable Quarantine VLAN (4093) detection : Enable Native Vlan : 101 Allowed Vlan list: 1-200 Untagged Vlan list: 101 Guest VLAN : Auth-Fail Vlan : AuthServer-Timeout Vlan : Switch sessions 1/240, Local port sessions:1/20 Client MAC Type Traffic-Vlan Dynamic-Vlan f0:4d:a2:be:a3:31 802.1x 101 101 Sessions info: f0:4d:a2:be:a3:31 Type=802.1x,TTLS,state=AUTHENTICATED,etime=0,eap_cnt=9 params:reAuth=60 user="local-RADIUS",security_grp="radiusgrp",fortinet_grp="Radius_Admins"