H3C S3100 Series Command Manual page 209

Keyword
userlogin-secure
userlogin-secure-ext
userlogin-secure-or-mac
userlogin-secure-or-mac-e
xt
userlogin-withoui
Security mode
userLoginSecure
userLoginSecureExt
macAddressOrUserLo
ginSecure
macAddressOrUserLo
ginSecureExt
userLoginWithOUI
1-16
Description
In this mode, MAC-based 802.1x
authentication is applied on users trying
to access the network through the port.
The port will be enabled when the
authentication succeeds and allow
packets from authenticated users to pass
through.
In this mode, only one
802.1x-authenticated user can access
the network through the port.
When the security mode of the port
changes from noRestriction to this
mode, the old dynamic MAC address
entries and authenticated MAC address
entries kept on the port are deleted
automatically.
This mode is similar to the
userLoginSecure mode, except that in
this mode, there can be more than one
802.1x-authenticated user on the port.
MAC address authentication and 802.1x
authentication can coexist on a port, with
802.1x authentication having higher
priority.
802.1x authentication can be applied on
users who have already passed MAC
address authentication.
However, users who have already
passed 802.1x authentication do not
need to go through MAC address
authentication.
In this mode, only one
802.1x-authenticated user can access
the network through the port. However,
there can be more than one
MAC-address-authenticated user on the
port.
This mode is similar to the
macAddressOrUserLoginSecure
mode, except that in this mode, there can
be more than one 802.1x-authenticated
user on the port.
Similar to the userLoginSecure mode, in
this mode, there can be only one
802.1x-authenticated user on the port.
However, the port also allows packets
with the OUI address to pass through.
When the security mode of the port
changes from noRestriction to this
mode, the old dynamic MAC address
entries and authenticated MAC address
entries kept on the port are deleted
automatically.