HP 6125XLG Configuration Manual page 98

Controlling MAC address learning
autoLearn
•
A port in this mode can learn MAC addresses. The automatically learned MAC addresses are not
added to the MAC address table as dynamic MAC address, but to the secure MAC address table
as secure MAC addresses. You can also configure secure MAC addresses by using the
port-security mac-address security command.
A port in autoLearn mode allows frames sourced from secure MAC addresses and MAC addresses
configured by using the mac-address dynamic and mac-address static commands to pass.
When the number of secure MAC addresses reaches the upper limit, the port transitions to secure
mode.
secure
•
MAC address learning is disabled on a port in secure mode. You configure MAC addresses by
using the mac-address static and mac-address dynamic commands. For more information about
configuring MAC address table entries, see Layer 2—LAN Switching Configuration Guide.
A port in secure mode allows only frames sourced from secure MAC addresses and MAC
addresses configured by using the mac-address dynamic and mac-address static commands to
pass.
Performing 802.1X authentication
userLogin
•
A port in this mode performs 802.1X authentication and implements port-based access control.
The port can service multiple 802.1X users. Once an 802.1X user passes authentication on the
port, any subsequent 802.1X users can access the network through the port without
authentication.
userLoginSecure
•
A port in this mode performs 802.1X authentication and implements MAC-based access control.
The port services only one user passing 802.1X authentication.
userLoginSecureExt
•
This mode is similar to the userLoginSecure mode except that this mode supports multiple online
802.1X users.
• userLoginWithOUI
This mode is similar to the userLoginSecure mode. The difference is that a port in this mode also
permits frames from one user whose MAC address contains a specific OUI.
For wired users, the port performs 802.1X authentication upon receiving 802.1X frames, and
performs OUI check upon receiving non-802.1X frames.
NOTE:
As defined by the IEEE, an OUI is the first 24 bits of the MAC address, which uniquely identifies a
device vendor.
Performing MAC authentication
macAddressWithRadius: A port in this mode performs MAC authentication, and services multiple users.
Performing a combination of MAC authentication and 802.1X authentication
macAddressOrUserLoginSecure
•
89