Displaying and Debugging 802.1x 229Displaying andDebugging 802.1xAfter performing the above configurations, you can display and verify the802.1x-related configuration by executing the display command in any view.You can clear 802.1x-related statistics information by executing the resetcommand in user view.ConfigurationExample802.1x ConfigurationExampleNetwork requirements■ Authenticate users on all ports to control their accesses to the Internet. Theswitch operates in MAC address-based access control mode.■ All supplicant systems that pass the authentication belong to the defaultdomain named "aabbcc.net". The domain can accommodate up to 30 users.As for authentication, a supplicant system is authenticated locally if the RADIUSserver fails. And as for accounting, a supplicant system is disconnected by forceif the RADIUS server fails. The name of an authenticated supplicant system isnot suffixed with the domain name. A connection is terminated if the total sizeof the data passes through it during a period of 20 minutes is less than 2,000bytes.■ The switch is connected to a server comprising of two RADIUS servers whose IPaddresses are 10.11.1.1 and 10.11.1.2. The RADIUS server with an IP addressof 10.11.1.1 operates as the primary authentication server and the secondaryaccounting server. The other operates as the secondary authentication serverand primary accounting server. The password for the switch and theauthentication RADIUS servers to exchange message is "name". And thepassword for the switch and the accounting RADIUS servers to exchangemessage is "money". The switch sends another packet to the RADIUS serversagain if it sends a packet to the RADIUS server and does not receive responsefor 5 seconds, with the maximum number of retries of 5. And the switch sendsa real-time accounting packet to the RADIUS servers once in every 15 minutes.A user name is sent to the RADIUS servers with the domain name truncated.■ The user name and password for local 802.1x authentication are "localuser"and "localpass" (in plain text) respectively. The idle disconnecting function isenabled.Table 170 Display and debug 802.1xOperation Command RemarksDisplay the configuration,session, and statisticsinformation about 802.1xdisplay dot1x [ sessions |statistics ] [ interfaceinterface-list ]This command can beexecuted in any view.Clear 802.1x-related statisticsinformationreset dot1x statistics [interface interface-list ]Execute this command in userview.
