Huawei Quidway S5600 Series Operation Manual page 195

Operation Manual – Port Security & Port Binding
Quidway S5600 Series Ethernet Switches-Release 1510
Security
mode
userlogin
-secure
userlogin
-withoui
mac-auth
entication
userlogin
-secure-o
r-mac
mac-else-
userlogin
-secure
userlogin
-secure-e
xt
userlogin
-secure-o
r-mac-ext
mac-else-
userlogin
-secure-e
xt
Description
The port is enabled only after the access user
passes the 802.1x authentication. Even after the
port is enabled, only the packets of the
successfully authenticated user can pass through
the port.
In this mode, only one 802.1x-authenticated user
is allowed to access the port.
When the port changes from the normal mode to
this security mode, the system automatically
removes the existing dynamic MAC address
entries and authenticated MAC address entries on
the port.
This mode is similar to the userlogin-secure
mode, except that there can be one OUI-carrying
MAC address being successfully authenticated in
addition to the single 802.1x-authenticated user
who is allowed to access the port.
When the port changes from the normal mode to
this security mode, the system automatically
removes the
dynamic/authenticated MAC address entries on
the port.
In this mode, MAC address–based authentication
is performed for access users.
In this mode, the two kinds of authentication in
mac-authentication
modes can be performed simultaneously. If both
kinds of authentication
userlogin-secure mode takes precedence over
the mac-authentication mode.
In this mode, first the MAC-based authentication is
performed. If this authentication succeeds, the
mac-authentication mode is adopted, or else, the
authentication in userlogin-secure mode is
performed.
This mode is similar to the userlogin-secure
mode, except that there can be more than one
802.1x-authenticated user on the port.
This mode is
userlogin-secure-or-mac mode, except that
there can be more than one 802.1x-authenticated
user on the port.
This mode is
mac-else-userlogin-secure mode, except that
there can be more than one 802.1x-authenticated
user on the port.
Huawei Technologies Proprietary
1-3
Chapter 1 Port Security Configuration
already existing
and userlogin-secure
succeed,
similar to
similar to
Feature
In these modes,
the device
enables the NTK
and Intrusion
Protection
features upon
detecting an
illegal packet.
the
the
the