H3C s3100 series Command Manual page 209

Table 1-3 Keyword description
Keyword
autolearn
mac-and-userlogin-secure
mac-and-userlogin-secure
-ext
mac-authentication
mac-else-userlogin-secure
mac-else-userlogin-secure
-ext
secure
userlogin
Security mode
autolearn
macAddressAndUser
LoginSecure
macAddressAndUser
LoginSecureExt
macAddressWithRadi
us
macAddressElseUser
LoginSecure
macAddressElseUser
LoginSecureExt
secure
userlogin
1-15
Description
In this mode, MAC addresses learned on
the port become security MAC
addresses.
When the number of security MAC
addresses exceeds the maximum
number of MAC addresses configured by
the port-security max-mac-count
command, the port security mode
changes to secure automatically.
After that, no more security MAC
addresses can be added to the port and
only the packets whose source MAC
addresses are the security MAC
addresses can pass through the port.
In this mode, users trying to assess the
network through the port must first pass
MAC address authentication and then
802.1x authentication.
In this mode, only one user can access
the network through the port at a time.
This mode is similar to the
macAddressAndUserLoginSecure
mode, except that in this mode, more
than one user can access the network
through the port in this mode.
In this mode, MAC address
authentication is applied on users trying
to access the network.
In this mode, a port performs MAC
authentication or 802.1x authentication of
an access user. If either authentication
succeeds, the user is authenticated.
In this mode, only one
802.1x-authenticated user can access
the network through the port. But at the
same time, there can be more than one
MAC-address-authenticated user on the
port.
This mode is similar to the
macAddressElseUserLoginSecure
mode, except that in this mode, there can
be more than one 802.1x-authenticated
user on the port.
In this mode, MAC address learning is
disabled on the current port. Only
packets whose source MAC addresses
are security MAC addresses, already
configured static MAC addresses can
pass through the port.
In this mode, 802.1x authentication is
applied on users trying to access the
network through the current port.