Instant role based access troubleshooting

[RD-one]

Hi

 I'm looking for a command on Instant, similar to the 'show user ip %ip%' on a controller. Especially the 'Role Derivation' info. Would such a command exist or is there a way to debug this?

Thx

Peter

[ariyap]

try "show client" and its other options.

[RD-one]

hi Ariya, show client debug seems to provide most information, but there is no role derivation info. Any other idea?

[ariyap]

there is also "show derivation-rules" command. See if that provide the info youare looking for.

[RD-one]

Hi Ariya

Unfortunately not.

This is the info that I'm looking for:

Role: authenticated (how: ROLE_DERIVATION_INITIAL_ROLE), ACL: 83/0
Authentication: No, status: not started, method: , protocol: , server:
Role Derivation: ROLE_DERIVATION_INITIAL_ROLE
VLAN Derivation: Default VLAN