H3C s3600 series Command Manual page 194

Keyword
userlogin-secure-ext
userlogin-secure-or-mac
userlogin-secure-or-mac-e
xt
userlogin-withoui
Description
Use the port-security port-mode command to set the security mode of the port.
Use the undo port-security port-mode command to restore the default mode.
By default, the port is in the noRestriction mode, namely access to the port is not restricted.
Security mode
userLoginSecureEx
t
macAddressOrUser
LoginSecure
macAddressOrUser
LoginSecureExt
userLoginWithOUI
1-15
Description
This mode is similar to the
userLoginSecure mode, except that in this
mode, there can be more than one
802.1x-authenticated user on the port.
MAC address authentication and 802.1x
authentication can coexist on a port, with
802.1x authentication having higher priority.
802.1x authentication can be applied on
users who have already passed MAC
address authentication.
However, users who have already passed
802.1x authentication do not need to go
through MAC address authentication.
In this mode, only one 802.1x-authenticated
user can access the network through the
port. However, there can be more than one
MAC-address-authenticated user on the
port.
This mode is similar to the
macAddressOrUserLoginSecure mode,
except that in this mode, there can be more
than one 802.1x-authenticated user on the
port.
Similar to the userLoginSecure mode, in
this mode, there can be only one
802.1x-authenticated user on the port.
However, the port also allows packets with
the OUI address to pass through.
When the security mode of the port
changes from noRestriction to this mode,
the old dynamic MAC address entries and
authenticated MAC address entries kept on
the port are deleted automatically.