3Com Switch 4500 Family Manual page 167

Keyword
mac-and-userlogin-sec
ure
mac-and-userlogin-sec
ure-ext
mac-authentication
mac-else-userlogin-se
cure
mac-else-userlogin-se
cure-ext
secure
userlogin
userlogin-secure
Security mode
macAddressAndUser
LoginSecure
macAddressAndUser
LoginSecureExt
macAddressWithRad
ius
macAddressElseUse
rLoginSecure
macAddressElseUse
rLoginSecureExt
secure
userlogin
userLoginSecure
1-14
Description
In this mode, users trying to assess the
network through the port must first pass MAC
address authentication and then 802.1x
authentication.
In this mode, only one user can access the
network through the port at a time.
This mode is similar to the
macAddressAndUserLoginSecure mode,
except that in this mode, more than one user
can access the network through the port in this
mode.
In this mode, MAC address authentication is
applied on users trying to access the network.
In this mode, MAC address authentication is
first applied on users. If the authentication
succeeds, the users can access the network
successfully. If not, 802.1x authentication is
applied.
In this mode, only one 802.1x-authenticated
user can access the network through the port.
But at the same time, there can be more than
one MAC-address-authenticated user on the
port.
This mode is similar to the
macAddressElseUserLoginSecure mode,
except that in this mode, there can be more
than one 802.1x-authenticated user on the
port.
In this mode, MAC address learning is
disabled on the port. The port permits packets
whose source MAC addresses are static and
dynamic MAC addresses that were configured
manually.
When the port mode changes from autolearn
to secure, the security MAC addresses that
were learned in the autolearn mode are
permitted to pass through the port.
In this mode, 802.1x authentication is applied
on users trying to access the network through
the current port.
In this mode, MAC-based 802.1x
authentication is applied on users trying to
access the network through the port. The port
will be enabled when the authentication
succeeds and allow packets from
authenticated users to pass through.
In this mode, only one 802.1x-authenticated
user can access the network through the port.
When the security mode of the port changes
from noRestriction to this mode, the old
dynamic MAC address entries and
authenticated MAC address entries kept on
the port are deleted automatically.