H3C Technologies H3C WX3000E Series Wireless Switches - Manual (Page 364)

343
Table 122 Configuration items
Item Description
Authentication Type For the clear-type wireless service, you can select Open-System only.
Port Mode
• mac-authentication—Perform MAC address authentication on users.
• mac-else-userlogin-secure—This mode is the combination of the
mac-authentication and userlogin-secure modes. MAC authentication has
a higher priority than userlogin-secure mode. Upon receiving a
non-802.1X frame, a port in this mode performs only MAC authentication.
When it receives an 802.1X frame, the port performs MAC authentication.
It performs 802.1X if MAC authentication fails.
• mac-else-userlogin-secure-ext—This mode is similar to the
mac-else-userlogin-secure mode, except that it supports multiple 802.1X
and MAC authentication users on the port.
• userlogin-secure—In this mode, MAC-based 802.1X authentication is
performed for users. Multiple 802.1X authenticated users can access the
port, but only one user can be online.
• userlogin-secure-or-mac—This mode is the combination of the
userlogin-secure and mac-authentication modes. 802.1X authentication
has a higher priority than MAC authentication. For a wireless user, 802.1X
authentication is performed first. If 802.1X authentication fails, MAC
authentication is performed.
• userlogin-secure-or-mac-ext—This mode is similar to the
userlogin-secure-or-mac mode, except that it supports multiple 802.1X and
MAC authentication users on the port.
• userlogin-secure-ext—In this mode, a port performs 802.1X
authentication on users in macbased mode and supports multiple 802.1X
users.
TIP:
There are multiple security modes. The following rules explain the port security
mode names:
• userLogin indicates port-based 802.1X authentication.
• mac indicates MAC address authentication.
• The authentication mode before Else is used preferentially. If the
authentication fails, the authentication after Else might be used depending
on the protocol type of the packets to be authenticated.
• The authentication modes before Or and after Or have the same priority.
The device determines the authentication mode according to the protocol
type of the packets to be authenticated. For wireless users, the 802.1X
authentication mode is used preferentially.
• userLogin together with Secure indicates MAC-based 802.1X
authentication.
• A security mode with Ext allows multiple 802.1X users to pass the
authentication. A security mode without Ext allows only one 802.1X user
to pass the authentication.
Max User
Maximum number of users that can be connected to the network through a
specific port.
a. Configure mac-authentication: