Show Authentication session command not showing complete data

Karry — Fri, 21 Feb 2020 18:56:41 GMT

Hi Everyone,

We have switch WS-C3650-48PS which is running on IOS 03.07.03E. we are using dot1x authentication on switch with cisco ISE.

We are able to see that the DACL is being pushed on the switch with "sh access-list" command.

But the same is not being displayed for the port. Also my show authentication session is displaying incomplete details for some reason. below is the output for the same.

ISE-TEST-SW#sh authentication sessions int gi 1/0/11

Interface MAC Address Method Domain Status Fg Session ID
----------------------------------------------------------------------
Gi1/0/11 xxxx.xxxx.xxxx.xxxx dot1x DATA Auth 0A173064000000290B561534

Key to Session Events Blocked Status Flags:

A - Applying Policy (multi-line status for details)
D - Awaiting Deletion
F - Final Removal in progress
I - Awaiting IIF ID allocation
N - Waiting for AAA to come up
P - Pushed Session
R - Removing User Profile (multi-line status for details)
U - Applying User Profile (multi-line status for details)
X - Unknown Blocker

Runnable methods list:
Handle Priority Name
    16       5      dot1x
    19       10     mab
    21       15     webauth

The endpoint ultimately does not get the network access.

Re: Show Authentication session command not showing complete data

Rob Ingram — Fri, 25 May 2018 12:11:53 GMT

Hi,

Can you provide the output of the command "show run aaa" and also the config on an interface configured with 802.1x.

I forget the different syntax per versions, but does the command "sh authentication sessions int gi 1/0/11" permit you to append "details"? It should provide an output like this:-

Can you upload the output of an authenticated device so I can have a look.

thanks

topic Re: Show Authentication session command not showing complete data in Network Access Control

Show Authentication session command not showing complete data

Re: Show Authentication session command not showing complete data