Page 1 of 1

port state Authenticated-L in show 802.1x users, meaning?

Posted: 23 May 2013 04:48
by yogenpartha1
Could anyone give explanation on the following dot1x port states. interested especially on the Authenticated-L

Port State The current state of the 802.1X port for a specific user:
• Initialize
• Disconnected
• Connecting
• Authenticating
• Authenticated
• Authenticated-L
• Authenticated-T - Supplicant learned according to the auth-server-down policy
• Aborting
• Held
• Force-Authenticated
• Force-Unauthenticated

Re: port state Authenticated-L in show 802.1x users, meaning?

Posted: 20 Nov 2015 05:35
by Dierckek
Most features are terribly documented indeed and I was looking for an answer on the same questions you posted 2 years ago.

I ran into the Authenticated-L explanation by accident in an old release note for the OS6800 switch, documenting PR107283. So for what it still is worth:
When supplicant failed the authentication with the external authentication server and if user configured a "failed" vlan on the device classification policy then AOS is going to locally authenticate the supplicant.
In cli the show command will show as authenticated-L to indicate that the supplicant failed by the external authentication serer but is locally authenticated to be authorized into the user defined vlan.