HP 5120 SI series Command Reference Manual page 185

Default level
2: System level
Parameters
Keyword
autolearn
mac-authentication
mac-else-userlogin-secur
e
mac-else-userlogin-secur
e-ext
secure
userlogin
userlogin-secure
Security mode
autoLearn
macAddressWithRad
ius
macAddressElseUserL
oginSecure
macAddressElseUserL
oginSecureExt
secure
userLogin
userLoginSecure
174
Description
In this mode, a port can learn MAC addresses, and allows
frames sourced from learned or configured the MAC
addresses to pass. These dynamically learned MAC
addresses are secure MAC addresses. You can also
configure secure MAC addresses by using the port-security
mac-address security command. A secure MAC address
never ages out by default. In addition, you can configure
MAC addresses manually by using the mac-address
dynamic and mac-address static commands for a port in
autoLearn mode.
When the number of secure MAC addresses reaches the
upper limit, the port turns to secure mode.
In this mode, a port performs MAC authentication for users
and services multiple users.
This mode is the combination of the
macAddressWithRadius and userLoginSecure modes, with
MAC authentication having a higher priority.
•
•
Similar to the macAddressElseUserLoginSecure mode
except that a port in this mode supports multiple 802.1X
and MAC authentication users.
In this mode, MAC address learning is disabled on the port
and you can configure MAC addresses by using the
mac-address static and mac-address dynamic commands.
The port permits only frames sourced from secure MAC
addresses and MAC addresses you manually configured
by using the mac-address static and mac-address dynamic
commands.
In this mode, a port performs 802.1X authentication and
implements port-based access control.
If one 802.1X user passes authentication, all the other
802.1X users of the port can access the network without
authentication.
In this mode, a port performs 802.1X authentication and
implements MAC-based access control. It services only
one user passing 802.1X authentication.
Upon receiving a non-802.1X
frame, a port in this mode
performs only MAC
authentication.
Upon receiving an 802.1X frame,
the port performs MAC
authentication and then, if MAC
authentication fails, 802.1X
authentication.