3Com 5500-EI PWR Reference Manual page 190

Table 1-3 Keyword description
Keyword
autolearn
mac-and-userlogin-sec
ure
mac-and-userlogin-sec
ure-ext
mac-authentication
mac-else-userlogin-se
cure
mac-else-userlogin-se
cure-ext
secure
userlogin
Security mode
autolearn
macAddressAndUser
LoginSecure
macAddressAndUser
LoginSecureExt
macAddressWithRad
ius
macAddressElseUse
rLoginSecure
macAddressElseUse
rLoginSecureExt
secure
userlogin
1-15
Description
In this mode, a port can learn a specified
number of MAC addresses and save those
addresses as security MAC addresses. It
permits only packets whose source MAC
addresses are the security MAC addresses
that were learned or configured manually.
When the number of security MAC addresses
reaches the upper limit configured by the
port-security max-count command, the port
changes to work in secure mode and no more
MAC addresses can be added to the port.
In this mode, users trying to assess the
network through the port must first pass MAC
address authentication and then 802.1x
authentication.
In this mode, only one user can access the
network through the port at a time.
This mode is similar to the
macAddressAndUserLoginSecure mode,
except that in this mode, more than one user
can access the network through the port in this
mode.
In this mode, MAC address authentication is
applied on users trying to access the network.
In this mode, MAC address authentication is
first applied on users. If the authentication
succeeds, the users can access the network
successfully. If not, 802.1x authentication is
applied.
In this mode, only one 802.1x-authenticated
user can access the network through the port.
But at the same time, there can be more than
one MAC-address-authenticated user on the
port.
This mode is similar to the
macAddressElseUserLoginSecure mode,
except that in this mode, there can be more
than one 802.1x-authenticated user on the
port.
In this mode, MAC address learning is
disabled on the port. The port permits packets
whose source MAC addresses are static and
dynamic MAC addresses that were configured
manually.
When the port mode changes from autolearn
to secure, the security MAC addresses that
were learned in the autolearn mode are
permitted to pass through the port.
In this mode, 802.1x authentication is applied
on users trying to access the network through
the current port.