HP FlexNetwork 7500 Series Command Reference Manual page 345

Parameters
Keyword
autolearn
mac-authentication
mac-else-userlogin-se
cure
mac-else-userlogin-se
cure-ext
secure
userlogin
userlogin-secure
userlogin-secure-ext
Security mode Description
A port in this mode can learn MAC addresses. The
automatically learned MAC addresses are not added to
the MAC address table as dynamic MAC address.
Instead, the MAC addresses are added to the secure
MAC address table as secure MAC addresses. You can
also configure secure MAC addresses by using the
port-security mac-address security command.
A port in autoLearn mode allows frames sourced from the
autoLearn
following MAC addresses to pass:
•
•
When the number of secure MAC addresses reaches the
upper limit set by the port-security max-mac-count
command, the port changes to secure mode.
macAddressWithRad In this mode, a port performs MAC authentication for
ius users and services multiple users.
This mode is the combination of the
macAddressWithRadius and userLoginSecure modes,
with MAC authentication having a higher priority. In this
mode, the port allows one 802.1X authentication user
and multiple MAC authentication users to log in.
macAddressElseUse
•
rLoginSecure
•
Same as the macAddressElseUserLoginSecure mode
macAddressElseUse
except that a port in this mode supports multiple 802.1X
rLoginSecureExt
and MAC authentication users.
In this mode, MAC address learning is disabled on the
port and you can configure MAC addresses by using the
mac-address static and mac-address dynamic
commands.
The port permits only frames sourced from the following
secure
MAC addresses to pass:
•
•
In this mode, a port performs 802.1X authentication and
implements port-based access control.
userLogin
If one 802.1X user passes authentication, all the other
802.1X users of the port can access the network without
authentication.
In this mode, a port performs 802.1X authentication and
userLoginSecure implements MAC-based access control. The port
services only one user passing 802.1X authentication.
Same as the userLoginSecure mode, except that this
userLoginSecureExt
mode supports multiple online 802.1X users.
330
Secure MAC addresses.
MAC addresses configured by using the
mac-address dynamic and mac-address static
commands.
Upon receiving a non-802.1X frame, a port in this
mode performs only MAC authentication.
Upon receiving an 802.1X frame, the port performs
MAC authentication and then, if MAC authentication
fails, 802.1X authentication.
Secure MAC addresses.
MAC addresses configured by using the
mac-address static and mac-address dynamic
commands.