Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

TechLibrary
Navigation
Table of Contents
Guide That Contains This Content
[+] Expand All
[-] Collapse All

    show captive-portal interface

    Syntax

    show captive-portal interface<interface-name> detail

    Release Information

    Command introduced in Junos OS Release 10.1 for EX Series switches.

    Description

    Display the current operational state of all captive portal interfaces with the list of connected users and the configured values of captive portal attributes on the interfaces.

    Options

    none
    		—

    Display all captive portal interfaces.

    interface-name
    		—

    (Optional) Display the state for the specified captive portal interface and lists the MAC address and user names of any clients authenticated on the interface.

    interface-name detail
    		—

    (Optional) Displays the configured values of captive portal attributes on the specified captive portal interface.

    Required Privilege Level

    view

     

    Related Documentation

     

    List of Sample Output

    show captive-portal interface (Only captive portal is enabled)
    show captive-portal interface (Both 802.1X authentication and captive portal are enabled)
    show captive-portal interface detail (Only captive portal is enabled)
    show captive-portal interface detail (Both 802.1X authentication and captive portal are enabled)

    Output Fields

    Table 1 lists the output fields for the show captive-portal interface command. Output fields are listed in the approximate order in which they appear.

    Table 1: show captive-portal interface Output Fields

    Field Name

    Field Description

    Level of Output

    Interface

    Interface on which captive portal has been configured.

    All levels

    State

    The state of the interface:

    • Authenticated—The client has been authenticated through the RADIUS server or has been permitted access through server fail fallback.
    • Authenticating—The client is authenticating through the RADIUS server.
    • Connecting—Switch is attempting to contact the RADIUS server.
    • Initialize—The interface link is down.
    • Held—An action has been triggered through server fail fallback during a RADIUS server timeout. A supplicant is denied access, permitted access through a specified VLAN, or maintains the authenticated state granted to it before the RADIUS server timeout occurred.

    All levels

    MAC address

    The MAC address of the connected client on the interface..

    brief

    User

    Users connected to the captive portal interface.

    brief

    Fallen back

    Indicates when 802.1X authentication and captive portal are both enabled on an interface:

    • If 802.1X authentication and captive portal are both enabled, CP fallen back status is Yes.
    • If 802.1X authentication and captive portal are not both enabled, CP fallen back status is No.

    Supplicant mode

    Mode used to authenticate clients—multiple, single, or single-supplicant.

    detail

    Number of retries

    Number of times the user can attempt to submit authentication information.

    detail

    Quiet period

    Time, in seconds, after a user exceeds the maximum number of retries before they can attempt to authenticate.

    detail

    Configured CP session timeout

    Time, in seconds, that a client can be idle before the session expires.

    detail

    Server timeout

    Time, in seconds, that an interface will wait for a reply when relaying a response from the client to the authentication server before timing out and invoking the server-fail action.

    detail

    Number of connected supplicants

    Number of users connecting through the captive portal interface. Information for each user includes:

    • Supplicant—User name and MAC address.
    • Operational state—See State (above).
    • Dynamic CP session timeout—Timeout value dynamically downloaded from the RADIUS server for this user, if any.
    • CP Session expiration due in—Time remaining in session.

    detail

    Sample Output

    show captive-portal interface (Only captive portal is enabled)

    user@switch> show captive-portal interface 
    Captive Portal Information:
Interface      State           MAC address          User          Fallen back
ge-0/0/1.0     Connecting
ge-0/0/10.0    Connecting      00:30:48:8c:66:bd    No User
ge-6/0/5.0     Authenticated   00:30:48:8d:7a:9b    abcdeX      No

    show captive-portal interface (Both 802.1X authentication and captive portal are enabled)

    user@switch> show captive-portal interface 
    Captive Portal Information:
Interface      State           MAC address          User          Fallen back
ge-0/0/1.0     Connecting
ge-0/0/10.0    Connecting      00:30:48:8c:66:bd    No User
ge-6/0/5.0     Authenticated   00:30:48:8d:7a:9b    abcdeX      Yes

    show captive-portal interface detail (Only captive portal is enabled)

    user@switch> show captive-portal interface detail ge-6/0/5.0

      Supplicant mode: Multiple
  Number of retries: 3
  Quiet period: 60 seconds
  Configured CP session timeout: 3600 seconds
  Server timeout: 15 seconds
  CP fallen back: No
  Number of connected supplicants: 1
      Supplicant: abcdeX, 00:30:48:8d:7a:9b
          Operational state: Authenticated
          Dynamic CP Session Timeout: 3600 seconds
          CP Session Expiration due in: 3583 seconds

    show captive-portal interface detail (Both 802.1X authentication and captive portal are enabled)

    user@switch> show captive-portal interface detail ge-6/0/5.0

     Supplicant mode: Multiple
  Number of retries: 3
  Quiet period: 60 seconds
  Configured CP session timeout: 3600 seconds
  Server timeout: 15 seconds
  CP fallen back: Yes
  Number of connected supplicants: 1
      Supplicant: abcdeX, 00:30:48:8d:7a:9b
          Operational state: Authenticated
          Dynamic CP Session Timeout: 3600 seconds
          CP Session Expiration due in: 3583 seconds

    Published: 2012-12-06

    Previous Page Next Page