Examples

This example shows the output from the show port-security command when you do not enter any options:

Router# show port-security
Secure Port      MaxSecureAddr  CurrentAddr  SecurityViolation  Security
Action
                    (Count)        (Count)      (Count)
----------------------------------------------------------------------------
 
     Fa5/1           11            11            0            Shutdown
     Fa5/5           15            5             0            Restrict
     Fa5/11          5             4             0            Protect
----------------------------------------------------------------------------
 
Total Addresses in System: 21
Max Addresses limit in System: 128
Router# 

This example shows how to display port-security information for a specified interface:

Router# show port-security interface fastethernet 5/1
Port Security: Enabled
Port status: SecureUp
Violation mode: Shutdown
Maximum MAC Addresses: 11
Total MAC Addresses: 11
Configured MAC Addresses: 3
Aging time: 20 mins
Aging type: Inactivity
SecureStatic address aging: Enabled
Security Violation count: 0
Router# 

This example show how to display all the secure MAC addresses that are configured on all the switch interfaces or on a specified interface with aging information for each address:

Router# show port-security address
Default maximum: 10 
VLAN Maximum Current 
1    5       3 
2    4       4 
3    6       4
Router#

Examples

The following example shows sample output from the show privilege command. The current privilege level is 15.

Router# show privilege
Current privilege level is 15

Examples

The following is sample output from the show radius statistics command:

Router# show radius statistics
                                Auth.      Acct.       Both
Maximum inQ length:              NA         NA        1
Maximum waitQ length:            NA         NA        2
Maximum doneQ length:            NA         NA        1
Total responses seen:            33         67        100
Packets with responses:          33         67        100
Packets without responses:       0          0         0
Access Rejects           :       0
Average response delay(ms) :     1331       124       523
Maximum response delay(ms):      5720       4800      5720
Number of Radius timeouts:       8          2         10
Duplicate ID detects:            0          0          0
Buffer Allocation Failures:      0          0          0
Maximum Buffer Size (bytes):     156        327        327
Malformed Responses        :     0          0          0
Bad Authenticators         :     0          0          0
Source Port Range: (2 ports only)
1645 - 1646
Last used Source Port/Identifier:
1645/33
1646/69

The table below describes significant fields shown in the display.

The fields in the output are mapped to Simple Network Management Protocol (SNMP) objects in the CISCO-RADIUS-EXT-MIB and are used in SNMP reporting. The first line of the report is mapped to the CISCO-RADIUS-EXT-MIB as follows:

• Maximum inQ length maps to creClientTotalMaxInQLength

• Maximum waitQ length maps to creClientTotalMaxWaitQLength

• Maximum doneQ length maps to creClientTotalMaxDoneQLength

The field "Both" in the output can be derived from the authentication and accounting MIB objects. The calculation formula for each field, as displayed in the output, is given in the table below.

Mapping the following set of objects listed in the CISCO-RADIUS-EXT-MIB map to fields displayed by the show radius statisticscommand is straightforward. For example, the creClientLastUsedSourcePort field corresponds to the Last used Source Port/Identifier portion of the report, creAuthClientBufferAllocFailures corresponds to the Buffer Allocation Failures for authentication packets, creAcctClientBufferAllocFailure corresponds to the Buffer Allocation Failures for accounting packets, and so on.

• creClientTotalMaxInQLength

• creClientTotalMaxWaitQLength

• creClientTotalMaxDoneQLength

• creClientTotalAccessRejects

• creClientTotalAverageResponseDelay

• creClientSourcePortRangeStart

• creClientSourcePortRangeEnd

• creClientLastUsedSourcePort

• creClientLastUsedSourceId

• creAuthClientBadAuthenticators

• creAuthClientUnknownResponses

• creAuthClientTotalPacketsWithResponses

• creAuthClientBufferAllocFailures

• creAuthClientTotalResponses

• creAuthClientTotalPacketsWithoutResponses

• creAuthClientAverageResponseDelay

• creAuthClientMaxResponseDelay

• creAuthClientMaxBufferSize

• creAuthClientTimeouts

• creAuthClientDupIDs

• creAuthClientMalformedResponses

• creAuthClientLastUsedSourceId

• creAcctClientBadAuthenticators

• creAcctClientUnknownResponses

• creAcctClientTotalPacketsWithResponses

• creAcctClientBufferAllocFailures

• creAcctClientTotalResponses

• creAcctClientTotalPacketsWithoutResponses

• creAcctClientAverageResponseDelay

• creAcctClientMaxResponseDelay

• creAcctClientMaxBufferSize

• creAcctClientTimeouts

• creAcctClientDupIDs

• creAcctClientMalformedResponses

• creAcctClientLastUsedSourceId

To locate and download MIBs for selected platforms, Cisco IOS releases, and feature sets, use Cisco MIB Locator found at the following URL: http:/​/​www.cisco.com/​go/​mibs .

Examples

The following is sample output from the show ssh command with SSH enabled:

Router# show ssh
Connection     Version      Encryption     State                 Username
0               1.5         3DES           Session Started        guest

The table below describes the significant fields shown in the display.