HP 5120 SI Series

175
Ke
y
word Securit
y
mode Descri
p
tion
userlogin-secure-ext userLoginSecureExt
Similar to the userLoginSecure mode except that this mode
supports multiple online 802.1X users.
userlogin-secure-or-mac
macAddressOrUserL
oginSecure
This mode is the combination of the userLoginSecure and
macAddressWithRadius modes.
For wired users, the port performs MAC authentication
upon receiving non-802.1X frames and performs 802.1X
authentication upon receiving 802.1X frames.
userlogin-secure-or-mac-
ext
macAddressOrUserL
oginSecureExt
Similar to the macAddressOrUserLoginSecure mode
except that a port in this mode supports multiple 802.1X
and MAC authentication users.
userlogin-withoui userLoginWithOUI
Similar to the userLoginSecure mode. In addition, a port in
this mode also permits frames from a user whose MAC
address contains a specified OUI (organizationally unique
identifier).
For wired users, the port performs 802.1X authentication
upon receiving 802.1X frames, and performs OUI check
upon receiving non-802.1X frames.
Description
Use the port-security port-mode command to set the port security mode of a port.
Use the undo port-security port-mode command to restore the default.
By default, a port operates in noRestrictions mode, where port security does not take effect.
• Configuration of port security mode on a port is mutually exclusive with the configuration of 802.1X
authentication, port access control method, port authorization mode, and MAC authentication on
the port.
• You can change the port security mode of a port only when the port is operating in noRestrictions
mode, the default mode. To restore the default port security mode, use the undo port-security
port-mode command.
• Before configuring the port security mode to autoLearn, configure the maximum number of secure
MAC addresses on the port by using the port-security max-mac-count command.
• You cannot change the port security mode of a port with users online.
Related commands: display port-security.
Examples
# Enable port security and configure the port security mode of port GigabitEthernet 1/0/1 as secure.
<Sysname> system-view
[Sysname] port-security enable
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] port-security port-mode secure
# Change the port security mode of port GigabitEthernet 1/0/1 to userLogin.
[Sysname-GigabitEthernet1/0/1] undo port-security port-mode
[Sysname-GigabitEthernet1/0/1] port-security port-mode userlogin