3Com WX3000 Series Operation Manual page 140

Security mode
In this mode, a port performs 802.1x authentication of users
userLoginSecure and services only one user passing 802.1x authentication at
a time.
userLoginSecure In this mode, a port performs 802.1x authentication of users
Ext and services users passing 802.1x authentication.
Similar to the userLoginSecure mode, a port in this mode
performs 802.1x authentication of users and services only
one user passing 802.1x authentication. The differences
include:
userLoginWithOU Such a port also permits frames from a wired user whose
I MAC address contains a specified OUI (organizationally
unique identifier).
For frames from a wireless user, such a port performs OUI
check at first. If the OUI check fails, the port performs 802.1x
authentication.
macAddressWith In this mode, a port performs RADIUS MAC authentication of
Radius users.
This mode is the combination of the userLoginSecure and
macAddressWithRadius modes, with 802.1x authentication
having a higher priority than MAC authentication.
For a user using a wired connection, the port performs MAC
authentication upon receiving non-802.1x frames and
macAddressOrUs
performs 802.1x authentication first upon receiving 802.1x
erLoginSecure
frames. If 802.1x authentication fails, the port performs MAC
authentication.
For a wireless user, 802.1x authentication is performed first.
If 802.1x authentication fails, MAC authentication is
performed.
This mode is similar to the macAddressOrUserLoginSecure
macAddressOrUs
mode, except that there can be more than one 802.1x
erLoginSecureExt
authenticated user on the port.
This mode is the combination of the macAddressWithRadius
and userLoginSecure modes, with MAC authentication
having a higher priority than 802.1x authentication.
macAddressElse Upon receiving a non-802.1x frame, a port in this mode
UserLoginSecure performs only MAC authentication.
Upon receiving an 802.1x frame, the port performs MAC
authentication and then, if MAC authentication fails, 802.1x
authentication.
macAddressElse This mode is similar to the macAddressElseUserLoginSecure
UserLoginSecure mode, except that there can be more than one 802.1x/MAC
Ext authenticated user on the port.
To perform 802.1x authentication on the access user, MAC
authentication must be performed first. 802.1x authentication
can be performed on the access user only if MAC
macAddressAnd
authentication succeeds.
UserLoginSecure
In this mode there can be only one authenticated user on the
port.
macAddressAnd This mode is similar to the macAddressAndUserLoginSecure
UserLoginSecure mode, except that there can be more than one authenticated
Ext user on the port.
Description
1-3
Feature
In any of these
modes, the
device triggers
the NTK and
Intrusion
Protection
features upon
detecting an
illegal packet
or illegal event.