D-Link DXS-3400 Emulator - Page 689

DXS-3400 Series Lite Layer 3 Stackable 10GbE Managed Switch CLI Reference Guide Authentication Username Client IP Address Assigned VID Assigned Priority Assigned Ingress Bandwidth Assigned Egress Bandwidth Method State Aging Time/Block Time Idle Time 802.1X Authenticator State 802.1X Backend State Indicates the user name of host. It's not available while the host is selected by MAC-Auth. Indicates the address of the client associates. It's only available while the host is selected by Web-Auth or JWAC. Effectively assigned VLAN ID that was authorized after the host passed authentication. Effectively assigned priority that was authorized after the host passed authentication. Effectively assigned ingress that was authorized after the host passed authentication. Effectively assigned egress that was authorized after the host passed authentication. The Authentication method, such as 802.1X, MAC-Auth, Web-Auth, JWAC and so on. The method authentication state. Authenticating - Host is under authentication by this method. Success - Host pass this method authentication. Selected - This method's authentication result is taken and parsed by system for the host. Failure - Host fail at this method authentication. No Information - Authentication info is unavailable. Aging Time - Specifies a time period during which an authenticated host will be kept in an authenticated state. When the aging time has timed-out, the host will be moved back to an unauthenticated state. Blocked Time - If a host fails to pass the authentication, the next authentication will not start within the block time unless the user clears the entry state manually. Idle Time - Indicates the leftover time of an authenticated session that will be terminated if the session sustains no activity for the configured period of time. It is only available for WEB sessions. Indicates the 802.1X authenticator PAE state: It can be one of the following values: INITIALIZE - Indicates the authenticator is initializing the state machine and ready to authenticate the supplicant. DISCONNECTED - Indicates that the state machine initialization has finished, but no supplicant connects to this port. CONNECTING - Indicates that the switch has detected a supplicant connecting to this port. The PAE will attempt to establish communication with a supplicant. AUTHENTICATING - Indicates that a supplicant is being authenticated. AUTHENTICATED - Indicates that the Authenticator has successfully authenticated the supplicant. ABORTING - Indicates that the authentication procedure is being prematurely aborted due to the receipt of a re-authentication request, an EAPOL-Start frame, an EAPOL-Logoff frame, or an authentication timeout. HELD - Indicates that the state machine ignores and discards all EAPOL packets in order to discourage brute force attacks. This state is entered from the AUTHENTICATING state following an authentication failure. FORCE_AUTH - Indicates that the supplicant is always authorized. FORCE_UNAUTH - Indicates that the supplicant is always unauthorized. Indicates the 802.1X backend PAE state. It can be one of the following values: REQUEST - Indicates that the state machine has received an EAP request packet from the authentication server and is relaying that packet to the Supplicant as an EAPOL-encapsulated frame. RESPONSE - Indicates that the state machine has received an EAPOLencapsulated EAP Response packet from the supplicant and is relaying the EAP packet to the authentication Server. 685