Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

header-navigation
keyboard_arrow_up
close
keyboard_arrow_left
Junos CLI Reference
Table of Contents Expand all
list Table of Contents
file_download PDF
{ "lLangCode": "en", "lName": "English", "lCountryCode": "us", "transcode": "en_US" }
English
keyboard_arrow_right

show captive-portal interface

date_range 19-Nov-23

Syntax

content_copy zoom_out_map
show captive-portal interface
<interface-name>
 detail

Description

Display the current operational state of all captive portal interfaces with the list of connected users and the configured values of captive portal attributes on the interfaces.

Options

none

Display all captive portal interfaces.

interface-name

(Optional) Display the state for the specified captive portal interface and lists the MAC address and user names of any clients authenticated on the interface.

interface-name detail

(Optional) Display the configured values of captive portal attributes on the specified captive portal interface.

Required Privilege Level

view

Output Fields

Table 1 lists the output fields for the show captive-portal interface command. Output fields are listed in the approximate order in which they appear.

Table 1: show captive-portal interface Output Fields

Field Name

Field Description

Level of Output

Interface

Interface on which captive portal has been configured.

All levels

State

The state of the interface:

  • Authenticated—The client has been authenticated through the RADIUS server or has been permitted access through server fail fallback.

  • Authenticating—The client is authenticating through the RADIUS server.

  • Connecting—Switch is attempting to contact the RADIUS server.

  • Initialize—The interface link is down.

  • Held—An action has been triggered through server fail fallback during a RADIUS server timeout. A supplicant is denied access, permitted access through a specified VLAN, or maintains the authenticated state granted to it before the RADIUS server timeout occurred.

All levels

MAC address

The MAC address of the connected client on the interface..

brief

User

Users connected to the captive portal interface.

brief

Fallen back

Indicates when 802.1X authentication and captive portal are both enabled on an interface:

  • If 802.1X authentication and captive portal are both enabled, CP fallen back status is Yes.

  • If 802.1X authentication and captive portal are not both enabled, CP fallen back status is No.

Supplicant mode

Mode used to authenticate clients—multiple, single, or single-supplicant.

detail

Number of retries

Number of times the user can attempt to submit authentication information.

detail

Quiet period

Time, in seconds, after a user exceeds the maximum number of retries before they can attempt to authenticate.

detail

Configured CP session timeout

Time, in seconds, that a client can be idle before the session expires.

detail

Server timeout

Time, in seconds, that an interface will wait for a reply when relaying a response from the client to the authentication server before timing out and invoking the server-fail action.

detail

Configured CP User-keepalive timeout

Time, in minutes, that a captive portal authentication session is extended after the MAC aging timer expires.

detail

Number of connected supplicants

Number of users connecting through the captive portal interface. Information for each user includes:

  • Supplicant—User name and MAC address.

  • Operational state—See State (above).

  • Dynamic CP session timeout—Timeout value dynamically downloaded from the RADIUS server for this user, if any.

  • CP Session expiration due in—Time remaining in session.

  • Eapol-Block—Shows whether EAPOL block is in effect or not.

  • CP Session User-keepalive Expiration due in—Time, in seconds, remaining in the keep-alive period.

detail

Sample Output

show captive-portal interface (Only Captive Portal Enabled)

content_copy zoom_out_map
user@switch> show captive-portal interface 
Captive Portal Information:
Interface      State           MAC address          User          Fallen back
ge-0/0/1.0     Connecting
ge-0/0/10.0    Connecting      00:30:48:8c:66:bd    No User
ge-6/0/5.0     Authenticated   00:30:48:8d:7a:9b    abcdeX      No

show captive-portal interface (802.1X Authentication and Captive Portal Enabled)

content_copy zoom_out_map
user@switch> show captive-portal interface 
Captive Portal Information:
Interface      State           MAC address          User          Fallen back
ge-0/0/1.0     Connecting
ge-0/0/10.0    Connecting      00:30:48:8c:66:bd    No User
ge-6/0/5.0     Authenticated   00:30:48:8d:7a:9b    abcdeX      Yes

show captive-portal interface detail (Only Captive Portal Enabled)

content_copy zoom_out_map
user@switch> show captive-portal interface detail ge-6/0/5.0

  Supplicant mode: Multiple
  Number of retries: 3
  Quiet period: 60 seconds
  Configured CP session timeout: 3600 seconds
  Server timeout: 15 seconds
  Configured CP User-keepalive timeout: 7 minutes
  CP fallen back: No
  Number of connected supplicants: 1
      Supplicant: abcdeX, 00:30:48:8d:7a:9b
          Operational state: Authenticated
          Dynamic CP Session Timeout: 3600 seconds
          CP Session Expiration due in: 3583 seconds
 	            Eapol-Block: In Effect
          CP session User-keepalive Expiration due in: 420 seconds

show captive-portal interface detail (802.1X Authentication and Captive Portal Enabled)

content_copy zoom_out_map
user@switch> show captive-portal interface detail ge-6/0/5.0

 Supplicant mode: Multiple
  Number of retries: 3
  Quiet period: 60 seconds
  Configured CP session timeout: 3600 seconds
  Server timeout: 15 seconds
  CP fallen back: Yes
  Number of connected supplicants: 1
      Supplicant: abcdeX, 00:30:48:8d:7a:9b
          Operational state: Authenticated
          Dynamic CP Session Timeout: 3600 seconds
          CP Session Expiration due in: 3583 seconds
              Eapol-Block: In Effect

Release Information

Command introduced in Junos OS Release 10.1.

footer-navigation