Command Manual ( For Soliton ) – Port Security-Port Binding
H3C S3100 Series Ethernet Switches
Chapter 1 Port Security Commands
1-16
Keyword
Security mode
Description
mac-and-us
erlogin-sec
ure-ext
macAddressAn
dUserLoginSec
ureExt
This mode is similar to the
macAddressAndUserLoginSecure
mode,
except that in this mode, more than one user can
access the network through the port in this
mode.
mac-authen
tication
macAddressWi
thRadius
In this mode, MAC address authentication is
applied on users trying to access the network.
mac-else-us
erlogin-sec
ure
macAddressEl
seUserLoginSe
cure
In this mode, a port performs MAC
authentication or 802.1x authentication of an
access user. If either authentication succeeds,
the user is authenticated.
In this mode, only one 802.1x-authenticated
user can access the network through the port.
But at the same time, there can be more than
one MAC-address-authenticated user on the
port.
mac-else-us
erlogin-sec
ure-ext
macAddressEl
seUserLoginSe
cureExt
This mode is similar to the
macAddressElseUserLoginSecure
mode,
except that in this mode, there can be more than
one 802.1x-authenticated user on the port.
secure secure
In this mode, MAC address learning is disabled
on the current port. Only packets whose source
MAC addresses are security MAC addresses,
already configured static MAC addresses can
pass through the port.
userlogin userlogin
In this mode, 802.1x authentication is applied on
users trying to access the network through the
current port.
userlogin-s
ecure
userLoginSecu
re
In this mode, MAC-based 802.1x authentication
is applied on users trying to access the network
through the port. The port will be enabled when
the authentication succeeds and allow packets
from authenticated users to pass through.
In this mode, only one 802.1x-authenticated
user can access the network through the port.
When the security mode of the port changes
from
noRestriction
to this mode, the old
dynamic MAC address entries and
authenticated MAC address entries kept on the
port are deleted automatically.
userlogin-s
ecure-ext
userLoginSecu
reExt
This mode is similar to the
userLoginSecure
mode, except that in this mode, there can be
more than one 802.1x-authenticated user on the
port.
