802.1X
nv show interface <interface-id> dot1x
Shows 802.1X configuration settings and authenticated session information for the specified interface.
Command Syntax
| Syntax | Description |
|---|---|
<interface-id> | The interface name. |
Version History
Introduced in Cumulus Linux 5.7.0
Example
cumulus@switch:~$ nv show interface swp1 dot1x
operational applied
-------------- ----------- --------
eap enabled
host-mode multi-host
mba disabled
auth-fail-vlan disabled
Authenticated Sessions
=========================
Mac Auth-Type Session-id Status Username Vlan Eapol TX Eapol RX Err RX Req TX Resp RX Start RX Req-id TX Resp-id RX Invalid RX Logoff RX
----------------- --------- ---------------- ---------- ------------ ---- -------- -------- ------ ------ ------- -------- --------- ---------- ---------- ---------
00:02:00:00:00:09 MD5 9EA1784C12F4E646 AUTHORIZED vlan10 10 3 3 0 2 2 1 1 1 0 0
00:55:00:00:00:09 MBA 946E00ED478CC8D3 AUTHORIZED 005500000009 10 0 3 0 0 0 0 0 0 0 0
nv show interface <interface-id> dot1x authenticated-sessions
Shows authenticated sessions and statistics for the specified interface.
Command Syntax
| Syntax | Description |
|---|---|
<interface-id> | The interface name. |
Version History
Introduced in Cumulus Linux 5.7.0
Example
cumulus@switch:~$ nv show interface swp1 dot1x authenticated-sessions
Mac Auth-Type Session-id Status Username Vlan Eapol TX Eapol RX Err RX Req TX Resp RX Start RX Req-id TX Resp-id RX Invalid RX Logoff RX
----------------- --------- ---------------- ---------- ------------ ---- -------- -------- ------ ------ ------- -------- --------- ---------- ---------- ---------
00:02:00:00:00:09 MD5 9EA1784C12F4E646 AUTHORIZED vlan10 10 3 3 0 2 2 1 1 1 0 0
00:55:00:00:00:09 MBA 946E00ED478CC8D3 AUTHORIZED 005500000009 10 0 3 0 0 0 0 0 0 0 0
nv show interface <interface-id> dot1x authenticated-sessions <mac-address>
Shows authenticated sessions and statistics for a specific MAC address.
Command Syntax
| Syntax | Description |
|---|---|
<interface-id> | The interface name. |
<mac-address> | The MAC address. |
Version History
Introduced in Cumulus Linux 5.7.0
Example
cumulus@switch:~$ nv show interface swp1 dot1x authenticated-sessions 00:02:00:00:00:09
operational
------------------------- -----------------
username vlan10
auth-type MD5
status AUTHORIZED
vlan 10
mac-address 00:02:00:00:00:09
session-id 9EA1784C12F4E646
counters
eapol-frames-tx 3
eapol-frames-rx 3
eapol-len-err-frames-rx 0
eapol-req-frames-tx 2
eapol-resp-frames-rx 2
eapol-start-frames-rx 1
eapol-req-id-frames-tx 1
eapol-resp-id-frames-rx 1
eapol-invalid-frames-rx 0
eapol-logoff-frames-rx 0
nv show interface <interface-id> dot1x authenticated-sessions <mac-address-id> counters
Shows statistics for the authenticated sessions on the specified interface.
Command Syntax
| Syntax | Description |
|---|---|
<interface-id> | The interface name. |
<mac-address-id> | The MAC address. |
Version History
Introduced in Cumulus Linux 5.7.0
Example
cumulus@switch:~$ nv show interface swp1 dot1x authenticated-sessions 00:02:00:00:00:09 counters
counters
eapol-frames-tx 3
eapol-frames-rx 3
eapol-len-err-frames-rx 0
eapol-req-frames-tx 2
eapol-resp-frames-rx 2
eapol-start-frames-rx 1
eapol-req-id-frames-tx 1
eapol-resp-id-frames-rx 1
eapol-invalid-frames-rx 0
eapol-logoff-frames-rx 0
nv show system dot1x
Shows 802.1X configuration on the switch.
Version History
Introduced in Cumulus Linux 5.7.0
Example
cumulus@leaf01:mgmt:~$ nv show system dot1x
operational applied
------------------------- ----------- ----------
reauthentication-interval 0
dynamic-vlan disabled
max-stations 6
radius
[server] 10.10.10.1
nv show system dot1x radius
Shows RADIUS configuration on the switch.
Version History
Introduced in Cumulus Linux 5.7.0
Example
cumulus@switch:~$ nv show system dot1x radius
operational applied
-------- ----------- ----------
[server] 10.10.10.1
nv show system dot1x radius server
Shows configuration information on the switch for RADIUS servers.
Version History
Introduced in Cumulus Linux 5.7.0
Example
cumulus@switch:~$ nv show system dot1x radius server
Server accounting-port authentication-port priority shared-secret vrf
--------- --------------- ------------------- -------- ------------- ---
10.10.10.1 1813 1812 1
nv show system dot1x radius server <server-id>
Shows configuration information on the switch for a specific RADIUS server.
Command Syntax
| Syntax | Description |
|---|---|
<server-id> | The IP address of the RADIUS server. |
Version History
Introduced in Cumulus Linux 5.7.0
Example
cumulus@switch:~$ nv show system dot1x radius server 10.10.10.1
operational applied
------------------- ----------- -------
priority 1 1
accounting-port 1813 1813
authentication-port 1812 1812
shared-secret *
nv show system dot1x-ipv6-summary
Shows the authenticated sessions for a tenant using 802.1X authentication.
Dynamic IPv6 multi-tenancy using 802.1X authentication integrates RADIUS authentication, address assignment, access control, and routing to provide tenant-specific IPv6 connectivity.
Version History
Introduced in Cumulus Linux 5.15.0
Example
cumulus@switch:~$ nv show interface dot1x-ipv6-summary
Interface Mac-Address Profile IPv6 Prefix Port ID Isolation ID
--------- ----------------- ---------- ------------------- ------- ------------
swp1 00:02:00:00:00:05 TENANT-A FDC0:D000:0017:B005 005 7B
swp2 00:02:00:00:00:06 TENANT-B FDC0:D000:0017:C006 006 7C
swp3 00:04:00:01:07:D0 TENANT-C FDC0:D000:0018:A7D0 7D0 8A
nv show system dot1x-summary
Shows which MAC addresses RADIUS has authorized.
Version History
Introduced in Cumulus Linux 5.14.0
Example
cumulus@switch:~$ nv show system dot1x-summary
Interface Mac-Address Status Auth-Type Username Vlan Session-id
--------- ----------------- ---------- --------- ------------ ---- ----------------
eth0 00:55:00:00:00:09 AUTHORIZED MBA 005500000009 10 946E00ED478CC8D3
00:02:00:00:00:09 AUTHORIZED MD5 vlan10 10 9EA1784C12F4E646
lo 00:55:00:00:00:09 AUTHORIZED MBA 005500000009 10 946E00ED478CC8D3
00:02:00:00:00:09 AUTHORIZED MD5 vlan10 10 9EA1784C12F4E646
mgmt 00:55:00:00:00:09 AUTHORIZED MBA 005500000009 10 946E00ED478CC8D3
00:02:00:00:00:09 AUTHORIZED MD5 vlan10 10 9EA1784C12F4E646
swp1 00:55:00:00:00:09 AUTHORIZED MBA 005500000009 10 946E00ED478CC8D3
00:02:00:00:00:09 AUTHORIZED MD5 vlan10 10 9EA1784C12F4E646
swp2 00:55:00:00:00:09 AUTHORIZED MBA 005500000009 10 946E00ED478CC8D3
00:02:00:00:00:09 AUTHORIZED MD5 vlan10 10 9EA1784C12F4E646
swp3 00:55:00:00:00:09 AUTHORIZED MBA 005500000009 10 946E00ED478CC8D3
00:02:00:00:00:09 AUTHORIZED MD5 vlan10 10 9EA1784C12F4E646
swp4 00:55:00:00:00:09 AUTHORIZED MBA 005500000009 10 946E00ED478CC8D3
00:02:00:00:00:09 AUTHORIZED MD5 vlan10 10 9EA1784C12F4E646
swp5 00:55:00:00:00:09 AUTHORIZED MBA 005500000009 10 946E00ED478CC8D3
00:02:00:00:00:09 AUTHORIZED MD5 vlan10 10 9EA1784C12F4E646
swp6 00:55:00:00:00:09 AUTHORIZED MBA 005500000009 10 946E00ED478CC8D3
00:02:00:00:00:09 AUTHORIZED MD5 vlan10 10 9EA1784C12F4E646
nv show system dot1x ipv6-profile
Shows the dynamic IPv6 multi-tenancy profiles configured on the switch.
Version History
Introduced in Cumulus Linux 5.15.0
Example
cumulus@switch:~$ nv show system dot1x ipv6-profile
No Data
nv show system dot1x ipv6-profile <profile-id>
Shows information about the dynamic IPv6 multi-tenancy profile.
Command Syntax
| Syntax | Description |
|---|---|
<profile-id> | The profile name. |
Version History
Introduced in Cumulus Linux 5.15.0
Example
cumulus@switch:~$ nv show system dot1x ipv6-profile TENANT-A
No Data
nv show interface dot1x-counters
Shows statistics for all interfaces. The command output also shows the number of reauthentication failures due to server timeouts. The switch increments this counter every time there is a reauthentication failure due to a Server timeout and the Supplicant Status remains as AUTHORIZED-REAUTH-TIMEOUT.
Version History
Introduced in Cumulus Linux 5.15.0
Example
cumulus@switch:~$ nv show interface dot1x-counters
Interface Mac-Address Eapol TX Eapol RX Req TX Resp RX Err RX Start RX Req-id TX Resp-id RX Invalid RX Logoff RX Summary
--------- ----------------- -------- -------- ------ ------- ------ -------- --------- ---------- ---------- --------- -----------------
swp1 00:02:00:00:00:05 23 18 12 17 0 1 11 9 0 0 Reauth Timeout: 3