1-15
Table 1-3 Keyword description
Keyword Security mode Description
autolearn autolearn
In this mode, MAC addresses learned on
the port become security MAC
addresses.
When the number of security MAC
addresses exceeds the maximum
number of MAC addresses configured by
the port-security max-mac-count
command, the port security mode
changes to secure automatically.
After that, no more security MAC
addresses can be added to the port and
only the packets whose source MAC
addresses are the security MAC
addresses can pass through the port.
mac-and-userlogin-secure
macAddressAndUser
LoginSecure
In this mode, users trying to assess the
network through the port must first pass
MAC address authentication and then
802.1x authentication.
In this mode, only one user can access
the network through the port at a time.
mac-and-userlogin-secure
-ext
macAddressAndUser
LoginSecureExt
This mode is similar to the
macAddressAndUserLoginSecure
mode, except that in this mode, more
than one user can access the network
through the port in this mode.
mac-authentication
macAddressWithRadi
us
In this mode, MAC address
authentication is applied on users trying
to access the network.
mac-else-userlogin-secure
macAddressElseUser
LoginSecure
In this mode, a port performs MAC
authentication or 802.1x authentication of
an access user. If either authentication
succeeds, the user is authenticated.
In this mode, only one
802.1x-authenticated user can access
the network through the port. But at the
same time, there can be more than one
MAC-address-authenticated user on the
port.
mac-else-userlogin-secure
-ext
macAddressElseUser
LoginSecureExt
This mode is similar to the
macAddressElseUserLoginSecure
mode, except that in this mode, there can
be more than one 802.1x-authenticated
user on the port.
secure secure
In this mode, MAC address learning is
disabled on the current port. Only
packets whose source MAC addresses
are security MAC addresses, already
configured static MAC addresses can
pass through the port.
userlogin userlogin
In this mode, 802.1x authentication is
applied on users trying to access the
network through the current port.