H3C Technologies H3C WX3000E Series Wireless Switches - Manual (Page 251)

235
Item Description
Port Mode
• mac-authentication—Perform MAC address authentication on
users.
• mac-else-userlogin-secure—This mode is the combination of
the mac-authentication and userlogin-secure modes, with MAC
authentication having a higher priority. Upon receiving a
non-802.1X frame, a port in this mode performs only MAC
authentication; upon receiving an 802.1X frame, the port
performs MAC authentication and then, if MAC authentication
fails, 802.1X authentication.
• mac-else-userlogin-secure-ext—This mode is similar to the
mac-else-userlogin-secure mode, except that it supports
multiple 802.1X and MAC authentication users on the port.
• userlogin-secure—In this mode, MAC-based 802.1X
authentication is performed for users; multiple 802.1X
authenticated users can access the port, but only one user can
be online.
• userlogin-secure-or-mac—This mode is the combination of the
userlogin-secure and mac-authentication modes, with 802.1X
authentication having a higher priority. For a wireless user,
802.1X authentication is performed first. If 802.1X
authentication fails, MAC authentication is performed.
• userlogin-secure-or-mac-ext—This mode is similar to the
userlogin-secure-or-mac mode, except that it supports multiple
802.1X and MAC authentication users on the port.
• userlogin-secure-ext—In this mode, a port performs 802.1X
authentication on users in macbased mode and supports
multiple 802.1X users.
TIP:
There are multiple security modes. To remember them easily, follow
these rules to understand part of the port security mode names:
• userLogin indicates port-based 802.1X authentication.
• mac indicates MAC address authentication.
• The authentication mode before Else is used preferentially. If
the authentication fails, the authentication after Else may be
used depending on the protocol type of the packets to be
authenticated.
• The authentication mode before Or and that after Or have the
same priority. The device determines the authentication mode
according to the protocol type of the packets to be
authenticated. For wireless users, the 802.1X authentication
mode is used preferentially.
• userLogin together with Secure indicates MAC-based 802.1X
authentication.
• A security mode with Ext allows multiple 802.1X users to pass
the authentication. A security mode without Ext allows only
one 802.1X user to pass the authentication.
Max User
Maximum number of users that can be connected to the network
through a specific port.
a. Configure mac-authentication