Hi Ramcharan - I highlighted that I ran the commands on 15.x to show the output and the commands "show dot1x" and "show authentication" seem to be supported in 12.2(55) Note: I do not have a box in front of me to validate.
http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst3560/software/release/12-2_55_se/configuration/guide/3560_scg/sw8021x.html#wp1097279 *show authentication *interface-id or *show dot1x interface **interface-id* On Thu, Feb 20, 2014 at 9:55 PM, Ramcharan Arya <[email protected]>wrote: > Jay, On your 2960 switch IOS version is 15.x However Steve is running IOS > 12.2(55). > > Steve: Can you enable debug on your switch and paste output here. > > Also there was a good blog written by Scott Moris on IPExpert site > regarding dot1x authentication on switches you might want to check that out. > > Thanks, > Ramcharan Arya > CCIE # 28926 (Voice/R&S) > > > > > > > > On Thu, Feb 20, 2014 at 10:12 PM, Jason Maynard > <[email protected]>wrote: > >> Hi Steve, >> >> Here is the output from the following commands on 2960 Version 15.0(2)SE5 >> >> >> sw1#show authentication sessions interface gigabitEthernet 0/7 >> Interface: GigabitEthernet0/7 >> MAC Address: 0050.56a1.3fda >> IP Address: 169.254.1.1 >> User-Name: 00-50-56-A1-3F-DA >> Status: Authz Success >> Domain: DATA >> Oper host mode: multi-host >> Oper control dir: both >> Authorized By: Authentication Server >> Vlan Policy: 100 >> ACS ACL: xACSACLx-IP-RESTRICT_dACL-52ec40ae >> URL Redirect ACL: ACL-WEBAUTH-REDIRECT >> URL Redirect: >> >> https://Test-ISE-Demo1.test.local:8443/guestportal/gateway?sessionId=0A6400D300000044073B992C&portal=GuestDRW&action=cwa&type=drw >> Session timeout: N/A >> Idle timeout: 180s (local), Remaining: 34s >> Common Session ID: 0A6400D300000044073B992C >> Acct Session ID: 0x00000045 >> Handle: 0xAE000045 >> >> Runnable methods list: >> Method State >> dot1x Failed over >> >> mab Authc Success >> >> >> >> >> sw1#show dot1x interface gig 0/7 details >> >> Dot1x Info for GigabitEthernet0/7 >> ----------------------------------- >> PAE = AUTHENTICATOR >> QuietPeriod = 60 >> ServerTimeout = 0 >> SuppTimeout = 30 >> ReAuthMax = 2 >> MaxReq = 2 >> TxPeriod = 10 >> >> Dot1x Authenticator Client List Empty >> >> >> >> On Thu, Feb 20, 2014 at 8:27 PM, Steven Allspach <[email protected] >> >wrote: >> >> > I am working through some of the labs and I am having some difficulty >> with >> > the dot1x authentication sections. I am using my own 3560s with IOS >> > 12.2(55). >> > >> > It appears that the dot1x port commands have changed since the Labs were >> > written. >> > >> > For example in in Vol 1 Lab 3 task 3.13 - >> > >> > The solution guide uses these interface commands: >> > dot1x auth-fail vlan 100 >> > dot1x guest-vlan 200 >> > >> > However the new interface commands appear to be: >> > authentication event fail action authorize vlan 100 >> > authentication event no-response action authorize vlan 200 >> > >> > Then the solution guide uses this command to verify: >> > show dot1x int f0/7 det >> > >> > However that command does not work and the cisco documentation says to >> use >> > the command "show authentication" to verify but that doesnt show me >> > anything. >> > >> > How can I verify my dot1x interface configurations with an output >> similar >> > to what the old "show dot1x int f0/7 det" command displays? >> > >> > Thanks in advance, >> > Steven Allspach >> > _______________________________________________ >> > Free CCIE R&S, Collaboration, Data Center, Wireless & Security Videos :: >> > >> > iPexpert on YouTube: www.youtube.com/ipexpertinc >> > >> _______________________________________________ >> Free CCIE R&S, Collaboration, Data Center, Wireless & Security Videos :: >> >> iPexpert on YouTube: www.youtube.com/ipexpertinc >> > > _______________________________________________ Free CCIE R&S, Collaboration, Data Center, Wireless & Security Videos :: iPexpert on YouTube: www.youtube.com/ipexpertinc
