Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
ON THIS PAGE
 

show captive-portal interface

Syntax

Description

Display the current operational state of all captive portal interfaces with the list of connected users and the configured values of captive portal attributes on the interfaces.

Options

none

Display all captive portal interfaces.
interface-name

(Optional) Display the state for the specified captive portal interface and lists the MAC address and user names of any clients authenticated on the interface.
interface-name detail

(Optional) Display the configured values of captive portal attributes on the specified captive portal interface.

Required Privilege Level

view

Output Fields

Table 1 lists the output fields for the show captive-portal interface command. Output fields are listed in the approximate order in which they appear.

Table 1: show captive-portal interface Output Fields

Field Name

Field Description

Level of Output

Interface

Interface on which captive portal has been configured.

All levels

State

The state of the interface:

  • Authenticated—The client has been authenticated through the RADIUS server or has been permitted access through server fail fallback.

  • Authenticating—The client is authenticating through the RADIUS server.

  • Connecting—Switch is attempting to contact the RADIUS server.

  • Initialize—The interface link is down.

  • Held—An action has been triggered through server fail fallback during a RADIUS server timeout. A supplicant is denied access, permitted access through a specified VLAN, or maintains the authenticated state granted to it before the RADIUS server timeout occurred.

All levels

MAC address

The MAC address of the connected client on the interface..

brief

User

Users connected to the captive portal interface.

brief

Fallen back

Indicates when 802.1X authentication and captive portal are both enabled on an interface:

  • If 802.1X authentication and captive portal are both enabled, CP fallen back status is Yes.

  • If 802.1X authentication and captive portal are not both enabled, CP fallen back status is No.

Supplicant mode

Mode used to authenticate clients—multiple, single, or single-supplicant.

detail

Number of retries

Number of times the user can attempt to submit authentication information.

detail

Quiet period

Time, in seconds, after a user exceeds the maximum number of retries before they can attempt to authenticate.

detail

Configured CP session timeout

Time, in seconds, that a client can be idle before the session expires.

detail

Server timeout

Time, in seconds, that an interface will wait for a reply when relaying a response from the client to the authentication server before timing out and invoking the server-fail action.

detail

Configured CP User-keepalive timeout

Time, in minutes, that a captive portal authentication session is extended after the MAC aging timer expires.

detail

Number of connected supplicants

Number of users connecting through the captive portal interface. Information for each user includes:

  • Supplicant—User name and MAC address.

  • Operational state—See State (above).

  • Dynamic CP session timeout—Timeout value dynamically downloaded from the RADIUS server for this user, if any.

  • CP Session expiration due in—Time remaining in session.

  • Eapol-Block—Shows whether EAPOL block is in effect or not.

  • CP Session User-keepalive Expiration due in—Time, in seconds, remaining in the keep-alive period.

detail

Sample Output

show captive-portal interface (Only Captive Portal Enabled)

show captive-portal interface (802.1X Authentication and Captive Portal Enabled)

show captive-portal interface detail (Only Captive Portal Enabled)

show captive-portal interface detail (802.1X Authentication and Captive Portal Enabled)

Release Information

Command introduced in Junos OS Release 10.1.

Related Documentation