3Com S7906E - Switch, Руководство по настройке

Страница: 1952 / 2621

1-3
Security mode Description Features
userLoginSecure
In this mode, a port performs 802.1X
authentication of users in
portbased mode and
services only one user passing 802.1X
authentication.
userLoginWithOUI
Similar to the userLoginSecure mode, a port in
this mode performs 802.1X authentication of
users and services only one user passing
802.1X authentication.
The differences between the two modes are as
follows:
The port also permits frames from a wired user
whose MAC address contains a specified OUI
(organizationally unique identifier).
macAddressWithRadius
In this mode, a port performs MAC
authentication of users.
macAddressOrUserLogi
nSecure
This mode is the combination of the
userLoginSecure and macAddressWithRadius
modes, with 802.1X authentication having a
higher priority.
For a user using a wired connection, the port
performs MAC authentication upon receiving
non-802.1X frames and performs 802.1X
authentication upon receiving 802.1X frames.
macAddressElseUserLo
ginSecure
This mode is the combination of the
macAddressWithRadius and userLoginSecure
modes, with MAC authentication having a
higher priority.
z
Upon receiving a non-802.1X frame, a port
in this mode performs only MAC
authentication.
z
Upon receiving an 802.1X frame, the port
performs MAC authentication and then, if
MAC authentication fails, 802.1X
authentication.
userLoginSecureExt
In this mode, a port performs 802.1X
authentication of users in macbased mode and
supports multiple 802.1X users.
macAddressOrUserLogi
nSecureExt
This mode is similar to the
macAddressOrUserLoginSecure mode, except
that it supports multiple 802.1X and MAC
authentication users on the port.
macAddressElseUserLo
ginSecureExt
This mode is similar to the
macAddressElseUserLoginSecure mode,
except that it supports multiple 802.1X and
MAC authentication users on the port.
In any of these modes,
the device will trigger
NTK and intrusion
protection upon
detecting an illegal
frame.