H3C MSR Series Command Reference Manual page 248

Keyword
mac-else-userlogin-se
cure
mac-else-userlogin-se
cure-ext
secure
userlogin
userlogin-secure
userlogin-secure-ext
userlogin-secure-or-
mac
userlogin-secure-or-
mac-ext
userlogin-withoui
Security mode Description
This mode is the combination of the
macAddressWithRadius and userLoginSecure modes,
with MAC authentication having a higher priority. In this
mode, the port allows one 802.1X authentication user
and multiple MAC authentication users to log in.
macAddressElseUse
•
rLoginSecure
•
Same as the macAddressElseUserLoginSecure mode
macAddressElseUse
except that a port in this mode supports multiple 802.1X
rLoginSecureExt
and MAC authentication users.
In this mode, MAC address learning is disabled on the
port and you can configure MAC addresses by using the
mac-address static and mac-address dynamic
commands.
The port permits only frames sourced from the following
secure
MAC addresses to pass:
•
•
In this mode, a port performs 802.1X authentication and
implements port-based access control.
userLogin
If one 802.1X user passes authentication, all the other
802.1X users of the port can access the network without
authentication.
In this mode, a port performs 802.1X authentication and
implements MAC-based access control. The port
userLoginSecure
services only one user passing 802.1X authentication.
Same as the userLoginSecure mode, except that this
userLoginSecureExt
mode supports multiple online 802.1X users.
This mode is the combination of the userLoginSecure
and macAddressWithRadius modes. In this mode, the
port allows one 802.1X authentication user and multiple
macAddressOrUserL
MAC authentication users to log in.
oginSecure
In this mode, the port performs 802.1X authentication
first. If 802.1X authentication fails, MAC authentication is
performed.
Same as the macAddressOrUserLoginSecure mode,
macAddressOrUserL
except that a port in this mode supports multiple 802.1X
oginSecureExt
and MAC authentication users.
Similar to the userLoginSecure mode. In addition, a port
in this mode also permits frames from a user whose MAC
address contains a specific OUI.
userLoginWithOUI
In this mode, the port performs OUI check at first. If the
OUI check fails, the port performs 802.1X authentication.
The port permits frames that pass OUI check or 802.1X
authentication.
225
Upon receiving a non-802.1X frame, a port in this
mode performs only MAC authentication.
Upon receiving an 802.1X frame, the port performs
MAC authentication and then, if MAC authentication
fails, 802.1X authentication.
Secure MAC addresses.
MAC addresses configured by using the
mac-address static and mac-address dynamic
commands.