H3C S6812 Series Command Reference Manual page 1905

Keyword
ecure-ext
secure
userlogin
userlogin-secure
userlogin-secure-ext
userlogin-secure-or-
mac
userlogin-secure-or-
mac-ext
userlogin-withoui
Security mode
rLoginSecureExt
secure
userLogin
userLoginSecure
userLoginSecureExt
macAddressOrUserL
oginSecure
macAddressOrUserL
oginSecureExt
userLoginWithOUI
17
Description
except that a port in this mode supports multiple 802.1X
and MAC authentication users.
In this mode, MAC address learning is disabled on the
port and you can configure MAC addresses by using the
mac-address static and mac-address dynamic
commands.
The port permits only frames sourced from the following
MAC addresses to pass:
•
Secure MAC addresses.
•
MAC addresses configured by using the
mac-address static and mac-address dynamic
commands.
In this mode, a port performs 802.1X authentication and
implements port-based access control.
If one 802.1X user passes authentication, all the other
802.1X users of the port can access the network without
authentication.
In this mode, a port performs 802.1X authentication and
implements MAC-based access control. The port
services only one user passing 802.1X authentication.
Same as the userLoginSecure mode, except that this
mode supports multiple online 802.1X users.
This mode is the combination of the userLoginSecure
and macAddressWithRadius modes. In this mode, the
port allows one 802.1X authentication user and multiple
MAC authentication users to log in.
In this mode, the port performs 802.1X authentication
first. By default, if 802.1X authentication fails, MAC
authentication is performed.
However, the port in this mode processes authentication
differently when the following conditions exist:
•
The port is enabled with parallel processing of MAC
authentication and 802.1X authentication.
•
The port is enabled with the 802.1X unicast trigger.
•
The port receives a packet from an unknown MAC
address.
Under such conditions, the port sends a unicast
EAP-Request/Identity packet to the MAC address to
initiate 802.1X authentication. After that, the port
immediately processes MAC authentication without
waiting for the 802.1X authentication result.
Same as the macAddressOrUserLoginSecure mode,
except that a port in this mode supports multiple 802.1X
and MAC authentication users.
Similar to the userLoginSecure mode. In addition, a port
in this mode also permits frames from a user whose
MAC address contains a specific OUI.
In this mode, the port performs OUI check at first. If the
OUI check fails, the port performs 802.1X
authentication. The port permits frames that pass OUI
check or 802.1X authentication.