175
Control MAC address learning
autoLearn
A port in this mode can learn MAC addresses and allows frames from learned or configured MAC
addresses to pass. The automatically learned MAC addresses are secure MAC addresses. also
configure secure MAC addresses by using
port-security mac-address security.
A secure MAC address
never ages out by default.
In addition, configure MAC addresses manually by using
mac-address dynamic
and
mac-address static
for a port in
autoLearn
mode.
When the number of secure MAC addresses reaches the upper limit, the port transitions to
secure
mode.
On a port operating in
autoLearn
mode, the dynamic MAC address learning function in MAC address
management is disabled.
secure
MAC address learning is disabled on a port in
secure
mode. You configure MAC addresses by using
mac-address static
and
mac-address dynamic
s.
A port in
secure
mode allows only frames sourced from secure MAC addresses and manually configured
MAC addresses to pass.
Perform 802.1X authentication
userLogin
A port in this mode performs 802.1X authentication and implements port-based access control. The port
can service multiple 802.1X users. If one 802.1X user passes authentication, all the other 802.1X users
of the port can access the network without authentication.
userLoginSecure
A port in this mode performs 802.1X authentication and implements MAC-based access control. The
port services only one user passing 802.1X authentication.
userLoginSecureExt
This mode is similar to the
userLoginSecure
mode except that this mode supports multiple online 802.1X
users.
userLoginWithOUI
This mode is similar to the
userLoginSecure
mode. The difference is that a port in this mode also permits
frames from one user whose MAC address contains a specified OUI.
For wired users, the port performs 802.1X authentication upon receiving 802.1X frames and performs
OUI check upon receiving non-802.1X frames.
Perform MAC authentication
macAddressWithRadius
A port in this mode performs MAC authentication and services multiple users.
