3Com Switch 4800G 24-Port Configuration Manual page 1163

Table 90 Port security modes
Security mode
userLoginSecure
userLoginWithOUI
macAddressWithR
adius
macAddressOrUser
LoginSecure
macAddressElseUs
erLoginSecure
userLoginSecureEx
t
macAddressOrUser
LoginSecureExt
macAddressElseUs
erLoginSecureExt
n
Currently, port security supports two authentication methods: 802.1x and MAC
■
authentication. Different port security modes employ different authentication
method or different combinations of authentication methods.
The maximum number of authenticated users that a port can support is the
■
smaller one between the maximum number of secure MAC addresses and the
maximum number of concurrent users that the mode of the port supports.
Description
In this mode, a port performs 802.1x
authentication of users in portbased mode and
services only one user passing 802.1x
authentication.
Similar to the userLoginSecure mode, a port in this
mode performs 802.1x authentication of users and
services only one user passing 802.1x
authentication.
A MAC address being a specified OUI
(organizationally unique identifier) are also allowed
on the port.
In this mode, a port performs MAC authentication
of users.
This mode is the combination of the
userLoginSecure and macAddressWithRadius
modes, with 802.1x authentication having a higher
priority.
the port performs MAC authentication upon
receiving non-8021.x frames and performs 802.1x
authentication first upon receiving 802.1x frames.
If 802.1x authentication fails, the port performs
MAC authentication.
This mode is the combination of the
macAddressWithRadius and userLoginSecure
modes, with MAC authentication having a higher
priority.
Upon receiving a non-802.1x frame, a port in
■
this mode performs only MAC authentication.
Upon receiving an 802.1x frame, the port
■
performs MAC authentication and then, if MAC
authentication fails, 802.1x authentication.
In this mode, a port performs 802.1x
authentication of users in macbased mode and
supports multiple concurrent users.
This mode is similar to
macAddressOrUserLoginSecure mode. The
difference is that this mode allows a port to
support multiple 802.1x and MAC authentication
users.
This mode is similar to
macAddressElseUserLoginSecure mode. The
difference is that this mode allows a port to
support multiple 802.1x and MAC authentication
users.
Introduction to Port Security
Features
In any of these
modes, the device
will trigger NTK and
intrusion protection
upon detecting an
illegal frame.
1163