Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

Navigation

show captive-portal interface

Syntax

show captive-portal interface<interface-name> detail

Release Information

Command introduced in Junos OS Release 10.1 for EX Series switches.

Description

Display the current operational state of all captive portal interfaces with the list of connected users and the configured values of captive portal attributes on the interfaces.

Options

none

Display all captive portal interfaces.

interface-name

(Optional) Display the state for the specified captive portal interface and lists the MAC address and user names of any clients authenticated on the interface.

interface-name detail

(Optional) Displays the configured values of captive portal attributes on the specified captive portal interface.

Required Privilege Level

view

List of Sample Output

show captive-portal interface (Only captive portal is enabled)
show captive-portal interface (Both 802.1X authentication and captive portal are enabled)
show captive-portal interface detail (Only captive portal is enabled)
show captive-portal interface detail (Both 802.1X authentication and captive portal are enabled)

Output Fields

Table 1 lists the output fields for the show captive-portal interface command. Output fields are listed in the approximate order in which they appear.

Table 1: show captive-portal interface Output Fields

Field Name

Field Description

Level of Output

Interface

Interface on which captive portal has been configured.

All levels

State

The state of the interface:

  • Authenticated—The client has been authenticated through the RADIUS server or has been permitted access through server fail fallback.
  • Authenticating—The client is authenticating through the RADIUS server.
  • Connecting—Switch is attempting to contact the RADIUS server.
  • Initialize—The interface link is down.
  • Held—An action has been triggered through server fail fallback during a RADIUS server timeout. A supplicant is denied access, permitted access through a specified VLAN, or maintains the authenticated state granted to it before the RADIUS server timeout occurred.

All levels

MAC address

The MAC address of the connected client on the interface..

brief

User

Users connected to the captive portal interface.

brief

Fallen back

Indicates when 802.1X authentication and captive portal are both enabled on an interface:

  • If 802.1X authentication and captive portal are both enabled, CP fallen back status is Yes.
  • If 802.1X authentication and captive portal are not both enabled, CP fallen back status is No.

Supplicant mode

Mode used to authenticate clients—multiple, single, or single-supplicant.

detail

Number of retries

Number of times the user can attempt to submit authentication information.

detail

Quiet period

Time, in seconds, after a user exceeds the maximum number of retries before they can attempt to authenticate.

detail

Configured CP session timeout

Time, in seconds, that a client can be idle before the session expires.

detail

Server timeout

Time, in seconds, that an interface will wait for a reply when relaying a response from the client to the authentication server before timing out and invoking the server-fail action.

detail

Number of connected supplicants

Number of users connecting through the captive portal interface. Information for each user includes:

  • Supplicant—User name and MAC address.
  • Operational state—See State (above).
  • Dynamic CP session timeout—Timeout value dynamically downloaded from the RADIUS server for this user, if any.
  • CP Session expiration due in—Time remaining in session.

detail

Sample Output

show captive-portal interface (Only captive portal is enabled)

user@switch> show captive-portal interface
Captive Portal Information:
Interface      State           MAC address          User          Fallen back
ge-0/0/1.0     Connecting
ge-0/0/10.0    Connecting      00:30:48:8c:66:bd    No User
ge-6/0/5.0     Authenticated   00:30:48:8d:7a:9b    abcdeX      No

show captive-portal interface (Both 802.1X authentication and captive portal are enabled)

user@switch> show captive-portal interface
Captive Portal Information:
Interface      State           MAC address          User          Fallen back
ge-0/0/1.0     Connecting
ge-0/0/10.0    Connecting      00:30:48:8c:66:bd    No User
ge-6/0/5.0     Authenticated   00:30:48:8d:7a:9b    abcdeX      Yes

show captive-portal interface detail (Only captive portal is enabled)

user@switch> show captive-portal interface detail ge-6/0/5.0

Supplicant mode: Multiple Number of retries: 3 Quiet period: 60 seconds Configured CP session timeout: 3600 seconds Server timeout: 15 seconds CP fallen back: No Number of connected supplicants: 1 Supplicant: abcdeX, 00:30:48:8d:7a:9b Operational state: Authenticated Dynamic CP Session Timeout: 3600 seconds CP Session Expiration due in: 3583 seconds

show captive-portal interface detail (Both 802.1X authentication and captive portal are enabled)

user@switch> show captive-portal interface detail ge-6/0/5.0

Supplicant mode: Multiple Number of retries: 3 Quiet period: 60 seconds Configured CP session timeout: 3600 seconds Server timeout: 15 seconds CP fallen back: Yes Number of connected supplicants: 1 Supplicant: abcdeX, 00:30:48:8d:7a:9b Operational state: Authenticated Dynamic CP Session Timeout: 3600 seconds CP Session Expiration due in: 3583 seconds

Published: 2014-04-23