3850 command to show wireless user dACL

Mason Tu — Mon, 05 Jul 2021 06:50:46 GMT

Hi,

I am using 3850 and 5760 with converged access mode.

There is also ISE to provide dACL for wireless user.

In 3850, I can issue "show access-list" to see the dACL from ISE.

But I can't be sure which ACL apply to which user when there are more than one dACL.

I have tried command like "show wireless client mac-address MAC detail" but didn't see anything related.

I can only achieve that by checking logs on ISE.

Is there any command I can do for this purpose?

3850 and 5760 version : 3.3.0

ISE version : 1.2

Thanks!!!

Hi Mason,I know that for

Patrick Meyer — Tue, 25 Mar 2014 12:21:30 GMT

Hi Mason,

I know that for switch IOS the command "show authentication session interface INTERFACE" shows the dACL that is applied to this port. I think the new command for the IOSXE devices is "show access-session mac H.H.H detail" is the corresponding one which should show the dACL that was applied to that MAC-address.

Please see if that works for you.

Best regards,

Patrick Meyer

topic 3850 command to show wireless user dACL in Wireless

3850 command to show wireless user dACL

Hi Mason,I know that for