HP 3600 v2 Series Command Reference Manual page 192

Parameters
Keyword
autolearn
mac-authentication
mac-else-userlogin
-secure
mac-else-userlogin
-secure-ext
secure
userlogin
userlogin-secure
userlogin-secure-e
xt
userlogin-secure-or
-mac
Security mode Description
In this mode, a port can learn MAC addresses, and allows frames
sourced from learned or configured the MAC addresses to pass.
The dynamically learned MAC addresses are secure MAC
addresses. You can also configure secure MAC addresses by
using the port-security mac-address security command. A secure
MAC address never ages out by default. In addition, you can
autoLearn
configure MAC addresses manually by using the mac-address
dynamic and mac-address static commands for a port in autoLearn
mode.
When the number of secure MAC addresses reaches the upper
limit set by the port-security max-mac-count command, the port
changes to secure mode.
macAddressWithR In this mode, a port performs MAC authentication for users and
adius services multiple users.
This mode is the combination of the macAddressWithRadius and
userLoginSecure modes, with MAC authentication having a higher
priority.
•
macAddressElseUs
erLoginSecure
•
Similar to the macAddressElseUserLoginSecure mode except that a
macAddressElseUs
port in this mode supports multiple 802.1X and MAC
erLoginSecureExt
authentication users.
In this mode, MAC address learning is disabled on the port and
you can configure MAC addresses by using the mac-address static
and mac-address dynamic commands.
secure
The port permits only frames sourced from secure MAC addresses
and MAC addresses you manually configured by using the
mac-address static and mac-address dynamic commands.
In this mode, a port performs 802.1X authentication and
implements port-based access control.
userLogin
If one 802.1X user passes authentication, all the other 802.1X
users of the port can access the network without authentication.
In this mode, a port performs 802.1X authentication and
userLoginSecure implements MAC-based access control. It services only one user
passing 802.1X authentication.
userLoginSecureEx Similar to the userLoginSecure mode except that this mode
t supports multiple online 802.1X users.
This mode is the combination of the userLoginSecure and
macAddressWithRadius modes.
macAddressOrUse
For wired users, the port performs MAC authentication upon
rLoginSecure
receiving non-802.1X frames and performs 802.1X authentication
upon receiving 802.1X frames.
Upon receiving a non-802.1X frame, a port in this mode
performs only MAC authentication.
Upon receiving an 802.1X frame, the port performs MAC
authentication and then, if MAC authentication fails, 802.1X
authentication.
182