Port Security Configuration Task List - 3Com 4210 9-Port Configuration Manual

Security mode
macAddressElseUs
erLoginSecureExt
macAddressAndUs
erLoginSecure
macAddressAndUs
erLoginSecureExt
When the port operates in the userlogin-withoui mode, Intrusion Protection will not be triggered
even if the OUI address does not match.
In the macAddressElseUserLoginSecure or macAddressElseUserLoginSecureExt security mode,
the MAC address of a user failing MAC authentication is set as a quiet MAC address. If the user
initiates 802.1x authentication during the quiet period, the switch does not authenticate the user.
A port with port security configured permits all ordinary Layer 2 packets to be forwarded whose
source MAC addresses are dynamic ones configured on the port.

Port Security Configuration Task List

Complete the following tasks to configure port security:
Enabling Port Security
Setting the Maximum Number of MAC Addresses Allowed on a Port
Setting the Port Security Mode
Configuring Port Security
Features
Configuring Guest VLAN for a Port in
macAddressOrUserLoginSecure mode
Ignoring the Authorization Information from the RADIUS Server
Configuring Security MAC Addresses
Description
This mode is similar to the
macAddressElseUserLoginSecure mode,
except that there can be more than one
802.1x-authenticated user on the port.
In this mode, a port firstly performs MAC
authentication for a user and then performs
802.1x authentication for the user if the user
passes MAC authentication. The user can
access the network after passing the two
authentications.
In this mode, up to one user can access the
network.
This mode is similar to the
macAddressAndUserLoginSecure mode,
except that more than one user can access
the network.
Task
Configuring the NTK feature
Configuring intrusion protection
Configuring the Trap feature
1-4
Feature
Remarks
Required
Optional
Required
Optional
Choose one or more features
as required.
Optional
Optional
Optional