H3C S5100-SI Operation Manual page 158

Table 1-1 Description of port security modes
Security mode
noRestriction
autolearn
secure
userlogin
Description
In this mode, access to the port is not
restricted.
In this mode, the port automatically learns
MAC addresses and changes them to security
MAC addresses.
This security mode will automatically change
to the secure mode after the amount of
security MAC addresses on the port reaches
the maximum number configured with the
port-security max-mac-count command.
After the port security mode is changed to the
secure mode, only those packets whose
source MAC addresses are security MAC
addresses learned or dynamic MAC
addresses configured can pass through the
port.
In this mode, the port is disabled from learning
MAC addresses.
Only those packets whose source MAC
addresses are security MAC addresses
learned and static or dynamic MAC addresses
can pass through the port.
In this mode, port-based 802.1x authentication
is performed for access users.
1-2
Feature
In this mode, neither the
NTK nor the intrusion
protection feature is
triggered.
In either mode, the device
will trigger NTK and
intrusion protection upon
detecting an illegal
packet.
In this mode, neither NTK
nor intrusion protection
will be triggered.