Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

3850 command to show wireless user dACL

Hi,

I am using 3850 and 5760 with converged access mode.

There is also ISE to provide dACL for wireless user.

In 3850, I can issue "show access-list" to see the dACL from ISE.

But I can't be sure which ACL apply to which user when there are more than one dACL.

I have tried command like "show wireless client mac-address MAC detail" but didn't see anything related.

I can only achieve that by checking logs on ISE.

Is there any command I can do for this purpose?

3850 and 5760 version : 3.3.0

ISE version : 1.2

Thanks!!!

  • Security and Network Management
Everyone's tags (3)
1 ACCEPTED SOLUTION

Accepted Solutions
New Member

Hi Mason,I know that for

Hi Mason,

I know that for switch IOS the command "show authentication session interface INTERFACE" shows the dACL that is applied to this port. I think the new command for the IOSXE devices is "show access-session mac H.H.H detail" is the corresponding one which should show the dACL that was applied to that MAC-address.

 

Please see if that works for you.

 

Best regards,

Patrick Meyer

1 REPLY
New Member

Hi Mason,I know that for

Hi Mason,

I know that for switch IOS the command "show authentication session interface INTERFACE" shows the dACL that is applied to this port. I think the new command for the IOSXE devices is "show access-session mac H.H.H detail" is the corresponding one which should show the dACL that was applied to that MAC-address.

 

Please see if that works for you.

 

Best regards,

Patrick Meyer

762
Views
0
Helpful
1
Replies
This widget could not be displayed.