3Com 4500 PWR 26-Port Configuration Manual page 179

T able 15-1 Description of port se
On the port, if you want to...
Control MAC address learning
Perform 802.1X authentication
Perform MAC authentication
Perform a combination of MAC
authentication and 802.1X
authentication
These security mode naming rules may help you remember the modes:
userLogin specifies 802.1X authentication and port-based access control.
userLogin with Secure specifies 802.1X authentication and MAC-based access control.
macAddress specifies MAC authentication.
And specifies that both MAC authentication and 802.1X authentication are required. A user can
access the network only after passin
Else specifies that the authentication method before Else is applied first. If the authentication
fails, whethe r to turn to the authentication method following Else depends on the protocol type of
the authentication request.
In a security mode with Or, which authentication method is to be used depends on the protocol
type of the authentication request.
Ext indicates allowing multiple 80
autoL earn mode vs. secure mode
In autoLearn mode, a port can learn MAC addresses. These dynamically learned MAC addresses
are secure MAC addresses. You can
mac-address security command. A secure MAC addresses never ages out by default. When the
number of secure MAC addresses reaches the upper limit, the port turns to secure mode. In
addition, you can configure dynamic MAC addresses by using the mac-address dynamic
command for a port in autoLearn mode.
In secure mode, MAC address learning is disabled on the port and you can configure static and
dynamic MAC addresses (by usi
command).
A port in autoLearn or secure mode allows only frames sourced from the MAC addresses that are in
the MAC address table to pass.
Figure 15-1 shows the packet processing on a port in autoLearn/secure mode and the mode transition.
curity modes
Use the security mode...
autoLearn
secure
userLogin
userLoginSecure
userLoginSecureExt
userL oginWithO UI
macAddressWithRadius
macAddressAndUserLoginSecure
And
macAddressAndUserLoginSecure
macAddressElseUserLoginSecure
Else
macAddressElseUserLoginSecureExt
macAddressOrUserLoginSecure
Or
macAddressOrUserLoginSe
g both authentications.
2.1X users to be authenticated and serviced at the same time.
also configure secure MAC addresses by using the
ng the mac-address static or mac-address dynamic
15-2
Ext
cureExt