Port Security Configuration For Macaddresselseuserloginsecure Mode - H3C S5500-EI Series Operation Manual – Port Security

Operation Manual – Port Security
H3C S5500-EI Series Ethernet Switches
The port is an authenticator
Authentication Mode is Auto
Port Control Type is Mac-based
802.1X Multicast-trigger is enabled
Guest VLAN: 0
Max number of on-line users is 256
EAPOL Packet: Tx 16331, Rx 102
Sent EAP Request/Identity Packets : 16316
Received EAPOL Start Packets : 6
1. Authenticated user : MAC address: 0002-0000-0011
Controlled User(s) amount to 1
In addition, the port allows an additional user whose MAC address has an OUI among
the specified OUIs to access the port. You can use the following command to view the
related information:
<Switch> display mac-address interface gigabitethernet 1/0/1
MAC ADDR
1234-0300-0011
--- 1 mac address(es) found

1.10.3 Port Security Configuration for macAddressElseUserLoginSecure Mode

I. Network requirements
The client is connected to the switch through GigabitEthernet 1/0/1. The switch
authenticates the client by the RADIUS server. If the authentication succeeds, the client
is authorized to access the Internet.
Restrict port GigabitEthernet 1/0/1 of the switch as follows:
Allow more than one MAC authenticated user to log on.
For 802.1x users, perform MAC authentication first and then, if MAC
authentication fails, 802.1x authentication. Allow only one 802.1x user to log on.
For MAC-based authentication, allow usernames and passwords in self-defined
formats.
802.1x-authenticated users to 64.
EAP Request/Challenge Packets: 6
EAP Success Packets: 4, Fail Packets: 5
EAPOL LogOff Packets: 2
EAP Response/Identity Packets : 80
EAP Response/Challenge Packets: 6
Error Packets: 0
VLAN ID STATE
1 Learned
Set the total
Chapter 1 Port Security Configuration
PORT INDEX
GigabitEthernet1/0/1
---
number of MAC
1-18
AGING TIME(s)
AGING
authenticated users and