176
Parameters
In this mode, a port can learn MAC addresses, and
allows frames sourced from learned or configured the
MAC addresses to pass. These dynamically learned
MAC addresses are secure MAC addresses. You can
also configure secure MAC addresses by using the port-
security mac-address security command. A secure MAC
address never ages out by default. In addition, you can
configure MAC addresses manually by using the mac-
address dynamic and mac-address static commands for
a port in autoLearn mode.
When the number of secure MAC addresses reaches the
upper limit, the port turns to secure mode.
In this mode, a port performs MAC authentication for
users and services multiple users.
mac-else-userlogin-
secure
macAddressElseUserL
oginSecure
This mode is the combination of the
macAddressWithRadius and userLoginSecure modes,
with MAC authentication having a higher priority.
ï‚· Upon receiving a non-802.1X frame, a port in this
mode performs only MAC authentication.
ï‚· Upon receiving an 802.1X frame, the port performs
MAC authentication and then, if MAC authentication
fails, 802.1X authentication.
mac-else-userlogin-
secure-ext
macAddressElseUserL
oginSecureExt
Similar to the macAddressElseUserLoginSecure mode
except that a port in this mode supports multiple 802.1X
and MAC authentication users.
In this mode, MAC address learning is disabled on the
port and you can configure MAC addresses by using the
mac-address static and mac-address dynamic
commands.
The port permits only frames sourced from secure MAC
addresses and MAC addresses you manually configured
by using the mac-address static and mac-address
dynamic commands.
In this mode, a port performs 802.1X authentication and
implements port-based access control.
If one 802.1X user passes authentication, all the other
802.1X users of the port can access the network without
authentication.
In this mode, a port performs 802.1X authentication and
implements MAC-based access control. It services only
one user passing 802.1X authentication.
Similar to the userLoginSecure mode except that this
mode supports multiple online 802.1X users.