Command Manual ( For Soliton ) – Port Security-Port Binding
H3C S3100 Series Ethernet Switches
Chapter 1 Port Security Commands
1-17
Keyword
Security mode
Description
userlogin-s
ecure-or-ma
c
macAddressOr
UserLoginSecu
re
MAC address authentication and 802.1x
authentication can coexist on a port, with 802.1x
authentication having higher priority.
802.1x authentication can be applied on users
who have already passed MAC address
authentication.
However, users who have already passed
802.1x authentication do not need to go through
MAC address authentication.
In this mode, only one 802.1x-authenticated
user can access the network through the port.
However, there can be more than one
MAC-address-authenticated user on the port.
userlogin-s
ecure-or-ma
c-ext
macAddressOr
UserLoginSecu
reExt
This mode is similar to the
macAddressOrUserLoginSecure
mode,
except that in this mode, there can be more than
one 802.1x-authenticated user on the port.
userlogin-wi
thoui
userLoginWith
OUI
Similar to the
userLoginSecure
mode, in this
mode, there can be only one
802.1x-authenticated user on the port. However,
the port also allows packets with the OUI
address to pass through.
When the security mode of the port changes
from
noRestriction
to this mode, the old
dynamic MAC address entries and
authenticated MAC address entries kept on the
port are deleted automatically.
Description
Use the
port-security port-mode
command to set the security mode of the port.
Use the
undo port-security port-mode
command to restore the default mode.
By default, the port is in the
noRestriction
mode, namely access to the port is not
restricted.
