1-4
z
For
wireless users, the port performs OUI check at first. If the OUI check fails, the port performs
802.1X authentication.
Perform MAC authentication
macAddressWithRadius: A port in this mode performs MAC authentication for users and services
multiple users.
Perform a combination of MAC authentication and 802.1X authentication
1) macAddressOrUserLoginSecure
This mode is the combination of macAddressWithRadius and userLoginSecure modes.
z
For wired users, the port performs MAC authentication upon receiving non-802.1X frames and
performs 802.1X authentication upon receiving 802.1X frames.
z
For wireless users, 802.1X authentication is performed first. If 802.1X authentication fails, MAC
authentication is performed.
2) macAddressOrUserLoginSecureExt
This mode is similar to the macAddressOrUserLoginSecure mode except that a port in this mode
supports multiple 802.1X and MAC authentication users.
3) macAddressElseUserLoginSecure
This mode is the combination of the macAddressWithRadius and userLoginSecure modes, with MAC
authentication having a higher priority as the
Else
keyword implies.
For non-802.1X frames, a port in this mode performs only MAC authentication. For 802.1X frames, it
performs MAC authentication and then, if the authentication fails, 802.1X authentication.
4) macAddressElseUserLoginSecureExt
This mode is similar to the macAddressElseUserLoginSecure mode except that a port in this mode
supports multiple 802.1X and MAC authentication users as the keyword
Ext
implies.
z
The maximum number of users a port supports equals the maximum number of secure MAC
addresses or the maximum number of authenticated users the security mode supports, whichever
is smaller.
z
For description about how to configure MAC addresses, refer to
MAC Address Table Commands
in
the
System Volume
.
These security mode naming rules may help you remember the modes:
