HP 6125G Command Reference Manual page 147

Keyword
userlogin
userlogin-secure
userlogin-secure-e
xt
userlogin-secure-or
-mac
userlogin-secure-or
-mac-ext
userlogin-withoui
Description
Use port-security port-mode to set the port security mode of a port.
Use undo port-security port-mode to restore the default.
By default, a port operates in noRestrictions mode, where port security does not take effect.
To change the security mode of a port security enabled port, you must set the port in noRestrictions mode
first. When the port has online users, you cannot change port security mode.
IMPORTANT:
If you are configuring the autoLearn mode, first set port security's limit on the number of MAC addresses
by using the port-security max-mac-count command. You cannot change the setting when the port is
operating in autoLearn mode.
When port security is enabled, you cannot manually enable 802.1X or MAC authentication, or change
the access control mode or port authorization state. The port security automatically modifies these
settings in different security modes.
Related commands: display port-security.
Examples
# Enable port security and set port GigabitEthernet 1/0/1 in secure mode.
<Sysname> system-view
[Sysname] port-security enable
[Sysname] interface gigabitethernet 1/0/1
Security mode Description
In this mode, a port performs 802.1X authentication and
implements port-based access control.
userLogin
If one 802.1X user passes authentication, all the other 802.1X
users of the port can access the network without authentication.
In this mode, a port performs 802.1X authentication and
userLoginSecure implements MAC-based access control. It services only one user
passing 802.1X authentication.
userLoginSecureEx Similar to the userLoginSecure mode except that this mode
t supports multiple online 802.1X users.
This mode is the combination of the userLoginSecure and
macAddressWithRadius modes.
macAddressOrUse
For wired users, the port performs MAC authentication 30 seconds
rLoginSecure
after receiving non-802.1X frames and performs 802.1X
authentication upon receiving 802.1X frames.
Similar to the macAddressOrUserLoginSecure mode except that a
macAddressOrUse
port in this mode supports multiple 802.1X and MAC
rLoginSecureExt
authentication users.
Similar to the userLoginSecure mode. In addition, a port in this
mode also permits frames from a user whose MAC address
contains a specific OUI (organizationally unique identifier).
userLoginWithOUI
For wired users, the port performs 802.1X authentication upon
receiving 802.1X frames, and performs OUI check upon receiving
non-802.1X frames.
138