3Com S7906E Configuration Manual page 1952

Security mode
userLoginSecure
userLoginWithOUI
macAddressWithRadius
macAddressOrUserLogi
nSecure
macAddressElseUserLo
ginSecure
userLoginSecureExt
macAddressOrUserLogi
nSecureExt
macAddressElseUserLo
ginSecureExt
Description
In this mode, a port performs 802.1X
authentication of users in portbased mode and
services only one user passing 802.1X
authentication.
Similar to the userLoginSecure mode, a port in
this mode performs 802.1X authentication of
users and services only one user passing
802.1X authentication.
The differences between the two modes are as
follows:
The port also permits frames from a wired user
whose MAC address contains a specified OUI
(organizationally unique identifier).
In this mode, a port performs MAC
authentication of users.
This mode is the combination of the
userLoginSecure and macAddressWithRadius
modes, with 802.1X authentication having a
higher priority.
For a user using a wired connection, the port
performs MAC authentication upon receiving
non-802.1X frames and performs 802.1X
authentication upon receiving 802.1X frames.
This mode is the combination of the
macAddressWithRadius and userLoginSecure
modes, with MAC authentication having a
higher priority.
Upon receiving a non-802.1X frame, a port
in this mode performs
authentication.
Upon receiving an 802.1X frame, the port
performs MAC authentication and then, if
MAC authentication
authentication.
In this mode, a port performs 802.1X
authentication of users in macbased mode and
supports multiple 802.1X users.
This mode is similar to the
macAddressOrUserLoginSecure mode, except
that it supports multiple 802.1X and MAC
authentication users on the port.
This mode is similar to the
macAddressElseUserLoginSecure mode,
except that it supports multiple 802.1X and
MAC authentication users on the port.
1-3
In any of these modes,
the device will trigger
NTK
protection
detecting
frame.
only MAC
fails, 802.1X
Features
and intrusion
upon
an illegal