H3C MSR Series Command Reference

225
Keyword
Security mode
Description
mac-else-userlogin-se
cure
macAddressElseUse
rLoginSecure
This mode is the combination of the
macAddressWithRadius and userLoginSecure modes,
with MAC authentication having a higher priority. In this
mode, the port allows one 802.1X authentication user
and multiple MAC authentication users to log in.
• Upon receiving a non-802.1X frame, a port in this
mode performs only MAC authentication.
• Upon receiving an 802.1X frame, the port performs
MAC authentication and then, if MAC authentication
fails, 802.1X authentication.
mac-else-userlogin-se
cure-ext
macAddressElseUse
rLoginSecureExt
Same as the macAddressElseUserLoginSecure mode
except that a port in this mode supports multiple 802.1X
and MAC authentication users.
secure
secure
In this mode, MAC address learning is disabled on the
port and you can configure MAC addresses by using the
mac-address static
and
mac-address dynamic
commands.
The port permits only frames sourced from the following
MAC addresses to pass:
• Secure MAC addresses.
• MAC addresses configured by using the
mac-address static and mac-address dynamic
commands.
userlogin
userLogin
In this mode, a port performs 802.1X authentication and
implements port-based access control.
If one 802.1X user passes authentication, all the other
802.1X users of the port can access the network without
authentication.
userlogin-secure
userLoginSecure
In this mode, a port performs 802.1X authentication and
implements MAC-based access control. The port
services only one user passing 802.1X authentication.
userlogin-secure-ext
userLoginSecureExt
Same as the userLoginSecure mode, except that this
mode supports multiple online 802.1X users.
userlogin-secure-or-
mac
macAddressOrUserL
oginSecure
This mode is the combination of the userLoginSecure
and macAddressWithRadius modes. In this mode, the
port allows one 802.1X authentication user and multiple
MAC authentication users to log in.
In this mode, the port performs 802.1X authentication
first. If 802.1X authentication fails, MAC authentication is
performed.
userlogin-secure-or-
mac-ext
macAddressOrUserL
oginSecureExt
Same as the macAddressOrUserLoginSecure mode,
except that a port in this mode supports multiple 802.1X
and MAC authentication users.
userlogin-withoui
userLoginWithOUI
Similar to the userLoginSecure mode. In addition, a port
in this mode also permits frames from a user whose MAC
address contains a specific OUI.
In this mode, the port performs OUI check at first. If the
OUI check fails, the port performs 802.1X authentication.
The port permits frames that pass OUI check or 802.1X
authentication.

H3C MSR Series Specifications

General

Category	Network Router
IPv6 Support	Yes
Dimensions	Varies by model
Weight	Varies by model
Product Type	Modular Router
Ports	Varies by model
WAN Interfaces	Varies by model
Firewall	Yes
QoS	Yes
Wireless Support	Varies by model
USB Ports	Varies by model
Console Port	Yes
Power Supply	Varies by model
Redundancy	Varies by model
Operating Temperature	0°C to 45°C
Storage Temperature	-40°C to 70°C
Humidity	5% to 95% non-condensing
Series	MSR
Certifications	CE, FCC, RoHS