H3C S5500-EI series Operation Manual page 1426

Operation Manual – Port Security
H3C S5500-EI Series Ethernet Switches
Security mode
userLoginSecur
e
userLoginWith
OUI
macAddressWit
hRadius
macAddressOr
UserLoginSecu
re
macAddressEls
eUserLoginSec
ure
userLoginSecur
eExt
macAddressOr
UserLoginSecu
reExt
macAddressEls
eUserLoginSec
ureExt
Description
In this mode, a port performs 802.1x
authentication of users in portbased mode
and services only one user passing 802.1x
authentication.
Similar to the userLoginSecure mode, a port
in this mode performs 802.1x authentication
of users and services only one user passing
802.1x authentication.
A MAC address being a specified OUI
(organizationally unique identifier) are also
allowed on the port.
In this mode, a port performs MAC
authentication of users.
This mode is the combination of the
userLoginSecure and
macAddressWithRadius modes, with 802.1x
authentication having a higher priority.
the port performs MAC authentication upon
receiving non-8021.x frames and performs
802.1x authentication first upon receiving
802.1x frames. If 802.1x authentication fails,
the port performs MAC authentication.
This mode is the combination of the
macAddressWithRadius and
userLoginSecure modes, with MAC
authentication having a higher priority.
Upon receiving a non-802.1x frame, a port
in this mode
authentication.
Upon receiving an 802.1x frame, the port
performs MAC authentication and then, if
MAC authentication
authentication.
In this mode, a port performs 802.1x
authentication of users in macbased mode
and supports multiple concurrent users.
This mode is similar to
macAddressOrUserLoginSecure mode. The
difference is that this mode allows a port to
support multiple 802.1x and MAC
authentication users.
This mode is similar to
macAddressElseUserLoginSecure mode.
The difference is that this mode allows a port
to support multiple 802.1x and MAC
authentication users.
1-3
Chapter 1 Port Security Configuration
performs only MAC
fails, 802.1x
Features
In any of these
modes, the
device will
trigger NTK and
intrusion
protection upon
detecting an
illegal frame.