debug mac-authentication
Enables the MAC authentication debugging for a single port.
Parameters
Modes
Privileged EXEC mode
Usage Guidelines
The no form of the command disables the MAC authentication debugging for a single port.
This debug command displays output that is useful for the technical support personnel.
Use the
ptrace aaa
command instead of the mac authentication command to display information about the
authentication of packets between the device and the RADIUS server.
Examples
device(config)# debug mac-authentication device(config)# Debug: Dec 9 10:59:56 Search for dot1x session with portid=1/2/4 and sessionid=[104433,ffc0002] in queue.. entry not found. Debug: Dec 9 10:59:56 Extracted username=0010.4433.0002 from EAP buffer. Debug: Dec 9 10:59:56 AAA-DOT1X (MACAUTH) - Created a new session for MAC Authentication Debug: Dec 9 10:59:56 Append a dot1x session: portid=1/2/4, sessionid=[104433,ffc0002], Total entries=1. Debug: Dec 9 10:59:56 AAA Queue Display Start...Total Entries: 1 Debug: Dec 9 10:59:56 PortId=67, SessionId=[104433,ffc0002] Username=0010.4433.0002, RadiusClient=255 Debug: Dec 9 10:59:56 PortId=67, SessionId=[104433,ffc0002] Username=0010.4433.0002, RadiusClient=255 Debug: Dec 9 10:59:56 AAA Queue Display End. Debug: Dec 9 10:59:56 Reseting RADIUS Client structure Debug: Dec 9 10:59:56 RADIUS: Reset client 0, Session type 2, Total number of active clients=1 Debug: Dec 9 10:59:56 AAA: Open RADIUS UDP port Debug: Dec 9 10:59:56 Tracing the outgoing Radius Authentication packet.. Debug: Dec 9 10:59:56 UDP packet source IP=10.37.171.160, port=1058, destination IP=10.20.67.118, port=1812 Debug: Dec 9 10:59:56 Radius Header (hex): Code=01 Identifier=09 Length=0073 Debug: Dec 9 10:59:56 Authenticator (hex):6f9196ca14bad62531e7d8fe265b57f2 Debug: Dec 9 10:59:56 Attribute Type(hex)=01 Len(hex)=10 Value (ASCII)=0010.4433.0002 Debug: Dec 9 10:59:56 Attribute Type(hex)=02 Len(hex)=12 Value (hex)=bce0,ddq%/a9fdc0903X1el1a Debug: Dec 9 10:59:56 Attribute Type(hex)=06 Len(hex)=06 Value (hex)=00000002 Debug: Dec 9 10:59:56 Attribute Type(hex)=0c Len(hex)=06 Value (hex)=000005dc Debug: Dec 9 10:59:56 Attribute Type(hex)=04 Len(hex)=06 Value (hex)=0a%aba0 Debug: Dec 9 10:59:56 Attribute Type(hex)=3d Len(hex)=06 Value (hex)=0000000f Debug: Dec 9 10:59:56 Attribute Type(hex)=05 Len(hex)=06 Value (hex)=000000D Debug: Dec 9 10:59:56 Attribute Type(hex)=20 Len(hex)=0c Value (hex)=Pavan_Sica Debug: Dec 9 10:59:56 Attribute Type(hex)=1f Len(hex)=13 Value (ASCII)=00-10-44-33-00-02 Debug: Dec 9 10:59:56 Debug: Dec 9 10:59:56 Search for dot1x session returned by RADIUS in AAA queue.. found entry. Debug: Dec 9 10:59:57 RADIUS message received from server of len 39. Debug: Dec 9 10:59:57 Tracing the received Radius packet.. Debug: Dec 9 10:59:57 Radius Header (hex): Code=02 Identifier=09 Length=0027 Debug: Dec 9 10:59:57 Authenticator (hex):da222c4bee99aa71e4991208a72fcff2 Debug: Dec 9 10:59:57 Attribute Type(hex)=40 Len(hex)=06 Value (hex)=0000000d Debug: Dec 9 10:59:57 Attribute Type(hex)=41 Len(hex)=06 Value (hex)=00000006 Debug: Dec 9 10:59:57 Attribute Type(hex)=51 Len(hex)=07 Value (hex)=U:100 Debug: Dec 9 10:59:57 Debug: Dec 9 10:59:57 RADIUS Timer cancelled for client 0. Debug: Dec 9 10:59:57 RADIUS server ACCEPTed request Debug: Dec 9 10:59:57 Search for dot1x session returned by RADIUS in AAA queue.. found entry. Debug: Dec 9 10:59:57 AAA-DOT1X (MACAUTH): Authentication successful for port 1/2/4 session [104433,ffc0002]. RADIUS 0/9 Debug: Dec 9 10:59:57 AAA send response to dot1x port 67 sessId [104433,ffc0002] Debug: Dec 9 10:59:57 One entry in the dot1x list. Debug: Dec 9 10:59:57 Delete a dot1x session: portid=1/2/4, sessionid=[104433,ffc0002], Entries left=0. Debug: Dec 9 10:59:57 Closing RADIUS UDP port Debug: Dec 9 10:59:57 RADIUS: radius_authenticate_stop for client Idx 0. Actv Clients left 0 Debug: Dec 9 10:59:57 Reseting RADIUS Client structure Debug: Dec 9 10:59:57 [T:1020671] [VLAN] [MGMT-POR] : 802.1X: vlan_name (String): 100 is now converted to vlan id (Decimal): 100