# 802.1X

## nv show interface <interface-id> dot1x

Shows 802.1X configuration settings and authenticated session information for the specified interface.

### Command Syntax

Syntax | Description
--- | ---
`<interface-id>` | The interface name.

### Version History

Introduced in Cumulus Linux 5.7.0

### Example

    cumulus@switch:~$ nv show interface swp1 dot1x
                    operational  applied
    --------------  -----------  --------
    eap                          enabled
    host-mode                    multi-host
    mba                          disabled
    auth-fail-vlan               disabled

    Authenticated Sessions
    =========================
        Mac                Auth-Type  Session-id        Status      Username      Vlan  Eapol TX  Eapol RX  Err RX  Req TX  Resp RX  Start RX  Req-id TX  Resp-id RX  Invalid RX  Logoff RX
        -----------------  ---------  ----------------  ----------  ------------  ----  --------  --------  ------  ------  -------  --------  ---------  ----------  ----------  ---------
        00:02:00:00:00:09  MD5        9EA1784C12F4E646  AUTHORIZED  vlan10        10    3         3         0       2       2        1         1          1           0           0
        00:55:00:00:00:09  MBA        946E00ED478CC8D3  AUTHORIZED  005500000009  10    0         3         0       0       0        0         0          0           0           0

## nv show interface <interface-id> dot1x authenticated-sessions

Shows authenticated sessions and statistics for the specified interface.

### Command Syntax

Syntax | Description
--- | ---
`<interface-id>` | The interface name.

### Version History

Introduced in Cumulus Linux 5.7.0

### Example

    cumulus@switch:~$ nv show interface swp1 dot1x authenticated-sessions
    Mac                Auth-Type  Session-id        Status      Username      Vlan  Eapol TX  Eapol RX  Err RX  Req TX  Resp RX  Start RX  Req-id TX  Resp-id RX  Invalid RX  Logoff RX
    -----------------  ---------  ----------------  ----------  ------------  ----  --------  --------  ------  ------  -------  --------  ---------  ----------  ----------  ---------
    00:02:00:00:00:09  MD5        9EA1784C12F4E646  AUTHORIZED  vlan10        10    3         3         0       2       2        1         1          1           0           0
    00:55:00:00:00:09  MBA        946E00ED478CC8D3  AUTHORIZED  005500000009  10    0         3         0       0       0        0         0          0           0           0

## nv show interface <interface-id> dot1x authenticated-sessions <mac-address>

Shows authenticated sessions and statistics for a specific MAC address.

### Command Syntax

Syntax | Description
--- | ---
`<interface-id>` | The interface name.
`<mac-address>` | The MAC address.

### Version History

Introduced in Cumulus Linux 5.7.0

### Example

    cumulus@switch:~$ nv show interface swp1 dot1x authenticated-sessions 00:02:00:00:00:09
                               operational
    -------------------------  -----------------
    username                   vlan10
    auth-type                  MD5
    status                     AUTHORIZED
    vlan                       10
    mac-address                00:02:00:00:00:09
    session-id                 9EA1784C12F4E646
    counters
      eapol-frames-tx          3
      eapol-frames-rx          3
      eapol-len-err-frames-rx  0
      eapol-req-frames-tx      2
      eapol-resp-frames-rx     2
      eapol-start-frames-rx    1
      eapol-req-id-frames-tx   1
      eapol-resp-id-frames-rx  1
      eapol-invalid-frames-rx  0
      eapol-logoff-frames-rx   0

## nv show interface <interface-id> dot1x authenticated-sessions <mac-address-id> counters

Shows statistics for the authenticated sessions on the specified interface.

### Command Syntax

Syntax | Description
--- | ---
`<interface-id>` | The interface name.
`<mac-address-id>` | The MAC address.

### Version History

Introduced in Cumulus Linux 5.7.0

### Example

    cumulus@switch:~$ nv show interface swp1 dot1x authenticated-sessions 00:02:00:00:00:09 counters
    counters
      eapol-frames-tx          3
      eapol-frames-rx          3
      eapol-len-err-frames-rx  0
      eapol-req-frames-tx      2
      eapol-resp-frames-rx     2
      eapol-start-frames-rx    1
      eapol-req-id-frames-tx   1
      eapol-resp-id-frames-rx  1
      eapol-invalid-frames-rx  0
      eapol-logoff-frames-rx   0

## nv show interface dot1x-counters

Shows statistics for all interfaces. The command output also shows the number of reauthentication failures due to server timeouts. The switch increments this counter every time there is a reauthentication failure due to a Server timeout and the Supplicant Status remains as AUTHORIZED-REAUTH-TIMEOUT.

### Version History

Introduced in Cumulus Linux 5.15.0

### Example

    cumulus@switch:~$ nv show interface dot1x-counters
    Interface  Mac-Address        Eapol TX  Eapol RX  Req TX  Resp RX  Err RX  Start RX  Req-id TX  Resp-id RX  Invalid RX  Logoff RX  Summary
    ---------  -----------------  --------  --------  ------  -------  ------  --------  ---------  ----------  ----------  ---------  -----------------
    swp1       00:02:00:00:00:05  23        18        12      17       0       1         11         9           0           0          Reauth Timeout: 3

## nv show system dot1x

Shows 802.1X configuration on the switch.

### Version History

Introduced in Cumulus Linux 5.7.0

### Example

    cumulus@leaf01:mgmt:~$ nv show system dot1x
                               operational  applied
    -------------------------  -----------  ----------
    reauthentication-interval               0
    dynamic-vlan                            disabled
    max-stations                            6
    radius
      [server]                              10.10.10.1

## nv show system dot1x radius

Shows RADIUS configuration on the switch.

### Version History

Introduced in Cumulus Linux 5.7.0

### Example

    cumulus@switch:~$ nv show system dot1x radius
              operational  applied
    --------  -----------  ----------
    [server]               10.10.10.1

## nv show system dot1x radius server

Shows configuration information on the switch for RADIUS servers.

### Version History

Introduced in Cumulus Linux 5.7.0

### Example

    cumulus@switch:~$ nv show system dot1x radius server
    Server      accounting-port  authentication-port  priority  shared-secret  vrf
    ---------   ---------------  -------------------  --------  -------------  ---
    10.10.10.1  1813             1812                 1

## nv show system dot1x radius server <server-id>

Shows configuration information on the switch for a specific RADIUS server.

### Command Syntax

Syntax | Description
--- | ---
`<server-id>` | The IP address of the RADIUS server.

### Version History

Introduced in Cumulus Linux 5.7.0

### Example

    cumulus@switch:~$ nv show system dot1x radius server 10.10.10.1
                        operational  applied
    -------------------  -----------  -------
    priority             1            1
    accounting-port      1813         1813
    authentication-port  1812         1812
    shared-secret                     *

## nv show system dot1x-ipv6-summary

Shows the authenticated sessions for a tenant using 802.1X authentication.

Dynamic IPv6 multi-tenancy using 802.1X authentication integrates RADIUS authentication, address assignment, access control, and routing to provide tenant-specific IPv6 connectivity.

### Version History

Introduced in Cumulus Linux 5.15.0

### Example

    cumulus@switch:~$ nv show interface dot1x-ipv6-summary
    Interface  Mac-Address        Profile     IPv6 Prefix           Port ID  Isolation ID
    ---------  -----------------  ----------  -------------------   -------  ------------
    swp1       00:02:00:00:00:05  TENANT-A   FDC0:D000:0017:B005    005      7B
    swp2       00:02:00:00:00:06  TENANT-B   FDC0:D000:0017:C006    006      7C
    swp3       00:04:00:01:07:D0  TENANT-C   FDC0:D000:0018:A7D0    7D0      8A

## nv show system dot1x-summary

Shows which MAC addresses RADIUS has authorized.

### Version History

Introduced in Cumulus Linux 5.14.0

### Example

    cumulus@switch:~$ nv show system dot1x-summary
    Interface  Mac-Address        Status      Auth-Type  Username      Vlan  Session-id
    ---------  -----------------  ----------  ---------  ------------  ----  ----------------
    eth0       00:55:00:00:00:09  AUTHORIZED  MBA        005500000009  10   946E00ED478CC8D3
               00:02:00:00:00:09  AUTHORIZED  MD5        vlan10        10   9EA1784C12F4E646
    lo         00:55:00:00:00:09  AUTHORIZED  MBA        005500000009  10   946E00ED478CC8D3
               00:02:00:00:00:09  AUTHORIZED  MD5        vlan10        10   9EA1784C12F4E646
    mgmt       00:55:00:00:00:09  AUTHORIZED  MBA        005500000009  10   946E00ED478CC8D3
               00:02:00:00:00:09  AUTHORIZED  MD5        vlan10        10   9EA1784C12F4E646
    swp1       00:55:00:00:00:09  AUTHORIZED  MBA        005500000009  10   946E00ED478CC8D3
               00:02:00:00:00:09  AUTHORIZED  MD5        vlan10        10   9EA1784C12F4E646
    swp2       00:55:00:00:00:09  AUTHORIZED  MBA        005500000009  10   946E00ED478CC8D3
               00:02:00:00:00:09  AUTHORIZED  MD5        vlan10        10   9EA1784C12F4E646
    swp3       00:55:00:00:00:09  AUTHORIZED  MBA        005500000009  10   946E00ED478CC8D3
               00:02:00:00:00:09  AUTHORIZED  MD5        vlan10        10   9EA1784C12F4E646
    swp4       00:55:00:00:00:09  AUTHORIZED  MBA        005500000009  10   946E00ED478CC8D3
               00:02:00:00:00:09  AUTHORIZED  MD5        vlan10        10   9EA1784C12F4E646
    swp5       00:55:00:00:00:09  AUTHORIZED  MBA        005500000009  10   946E00ED478CC8D3
               00:02:00:00:00:09  AUTHORIZED  MD5        vlan10        10   9EA1784C12F4E646
    swp6       00:55:00:00:00:09  AUTHORIZED  MBA        005500000009  10   946E00ED478CC8D3
               00:02:00:00:00:09  AUTHORIZED  MD5        vlan10        10   9EA1784C12F4E646

## nv show system dot1x ipv6-profile

Shows the dynamic IPv6 multi-tenancy profiles configured on the switch.

### Version History

Introduced in Cumulus Linux 5.15.0

### Example

    cumulus@switch:~$ nv show system dot1x ipv6-profile
    No Data

## nv show system dot1x ipv6-profile <profile-id>

Shows information about the dynamic IPv6 multi-tenancy profile.

### Command Syntax

Syntax | Description
--- | ---
`<profile-id>` | The profile name.

### Version History

Introduced in Cumulus Linux 5.15.0

### Example

    cumulus@switch:~$ nv show system dot1x ipv6-profile TENANT-A
    No Data

## nv show system dot1x tx-identity-request

Shows 802.1x reauthentication configuration. 802.1X reauthentication ensures that the switch revalidates connected clients for authorization and security after a port flap or switch reboot.

### Version History

Introduced in Cumulus Linux 5.16.0

### Example

    cumulus@switch:~$ nv show system dot1x tx-identity-request
                   operational  applied
    -------------- ----------   --------
    state          disabled     enabled
    delay                       10
    interval                    10