H3C H3C S3600 Series, Руководство по управлению

Страница: 193 / 1277

1-14
Keyword Security mode Description
mac-and-userlogin-secure
macAddressAndUs
erLoginSecure
In this mode, users trying to assess the
network through the port must first pass
MAC address authentication and then
802.1x authentication.
In this mode, only one user can access the
network through the port at a time.
mac-and-userlogin-secure
-ext macAddressAndUs
erLoginSecureExt
This mode is similar to the
macAddressAndUserLoginSecure
mode, except that in this mode, more than
one user can access the network through
the port in this mode.
mac-authentication
macAddressWithRa
dius
In this mode, MAC address authentication
is applied on users trying to access the
network.
mac-else-userlogin-secure
macAddressElseUs
erLoginSecure
In this mode, MAC address authentication
is first applied on users. If the authentication
succeeds, the users can access the
network successfully. If not, 802.1x
authentication is applied.
In this mode, only one 802.1x-authenticated
user can access the network through the
port. But at the same time, there can be
more than one MAC-address-authenticated
user on the port.
mac-else-userlogin-secure
-ext macAddressElseUs
erLoginSecureExt
This mode is similar to the
macAddressElseUserLoginSecure
mode, except that in this mode, there can
be more than one 802.1x-authenticated
user on the port.
secure secure
In this mode, MAC address learning is
disabled on the current port. Only packets
whose source MAC addresses are security
MAC addresses, already configured static
or dynamic MAC addresses can pass
through the port.
userlogin userlogin
In this mode, 802.1x authentication is
applied on users trying to access the
network through the current port.
userlogin-secure userLoginSecure
In this mode, MAC-based 802.1x
authentication is applied on users trying to
access the network through the port. The
port will be enabled when the authentication
succeeds and allow packets from
authenticated users to pass through.
In this mode, only one 802.1x-authenticated
user can access the network through the
port.
When the security mode of the port
changes from
noRestriction to this mode,
the old dynamic MAC address entries and
authenticated MAC address entries kept on
the port are deleted automatically.