Configuration Task List - HP FlexFabric 5700 Series Security Configuration Manual

userLoginWithOUI.
•
This mode is similar to the userLoginSecure mode. The difference is that a port in this mode also
permits frames from one user whose MAC address contains a specific OUI.
In this mode, the port performs OUI check first. If the OUI check fails, the port performs 802.1X
authentication. The port permits frames that pass OUI check or 802.1X authentication.
NOTE:
An OUI is a 24-bit number that uniquely identifies a vendor, manufacturer, or organization. In MAC
addresses, the first three octets are the OUI.
Performing MAC authentication
macAddressWithRadius: A port in this mode performs MAC authentication, and services multiple users.
Performing a combination of MAC authentication and 802.1X authentication
• macAddressOrUserLoginSecure.
This mode is the combination of the macAddressWithRadius and userLoginSecure modes. The
mode allows one 802.1X authentication user and multiple MAC authentication users to log in.
In this mode, the port performs 802.1X authentication first. If 802.1X authentication fails, MAC
authentication is performed.
macAddressOrUserLoginSecureExt.
•
This mode is similar to the macAddressOrUserLoginSecure mode, except that this mode supports
multiple 802.1X and MAC authentication users.
• macAddressElseUserLoginSecure.
This mode is the combination of the macAddressWithRadius and userLoginSecure modes, with
MAC authentication having a higher priority as the Else keyword implies. The mode allows one
802.1X authentication user and multiple MAC authentication users to log in.
The port performs MAC authentication upon receiving non-802.1X frames. Upon receiving
802.1X frames, the port performs MAC authentication and then, if the authentication fails, 802.1X
authentication.
macAddressElseUserLoginSecureExt.
•
This mode is similar to the macAddressElseUserLoginSecure mode except that this mode supports
multiple 802.1X and MAC authentication users as the Ext keyword implies.

Configuration task list

Tasks at a glance
(Required.)
(Optional.)
addresses on a port
(Required.)
(Required.)
•
Configuring NTK
•
Configuring intrusion protection
(Optional.)
Enabling port security
Setting port security's limit on the number of secure MAC
Setting the port security mode
Configuring port security
Configuring secure MAC addresses
features:
176
Remarks
N/A
N/A
N/A
Configure one or more port security
features according to the network
requirements.
N/A