H3C S3100 8C SI User Manual

Operation Manual – Port Security-Port Binding
H3C S3100 Series Ethernet Switches Chapter 1 Port Security Configuration
1-4
Security mode Description Feature
macAddressOrU
serLoginSecure
Ext
This mode is similar to the
macAddressOrUserLoginSecure
mode, except that there can be more
than one 802.1x-authenticated user on
the port. .
macAddressEls
eUserLoginSecu
re
In this mode, a port performs MAC
authentication or 802.1x
authentication of an access user. If
either authentication succeeds, the
user is authenticated.
In this mode, there can be only one
802.1x-authenticated user on the port,
but there can be several
MAC-authenticated users.
macAddressEls
eUserLoginSecu
reExt
This mode is similar to the
macAddressElseUserLoginSecure
mode, except that there can be more
than one 802.1x-authenticated user on
the port.
macAddressAnd
UserLoginSecur
e
In this mode, a port firstly performs
MAC authentication for a user and
then performs 802.1x authentication
for the user if the user passes MAC
authentication. The user can access
the network after passing the two
authentications.
In this mode, up to one user can
access the network.
macAddressAnd
UserLoginSecur
eExt
This mode is similar to the
macAddressAndUserLoginSecure
mode, except that more than one user
can access the network.
 Note:
z When the port operates in the userlogin-withoui mode, Intrusion Protection will not
be triggered even if the OUI address does not match.
z In the macAddressElseUserLoginSecure or macAddressElseUserLoginSecureExt
security mode, the MAC address of a user failing MAC authentication is set as a
quiet MAC address. If the user initiates 802.1x authentication during the quiet period,
the switch does not authenticate the user.
z A port with port security configured permits all ordinary Layer 2 packets to be
forwarded whose source MAC addresses are dynamic ones configured on the port.

H3C S3100 8C SI Specifications

General

Brand	H3C
Model	S3100 8C SI
Category	Switch
Language	English