1-3
Security mode Description Feature
userLoginSecure
In this mode, a port performs 802.1x authentication of users
and services only one user passing 802.1x authentication at
a time.
userLoginSecure
Ext
In this mode, a port performs 802.1x authentication of users
and services users passing 802.1x authentication.
userLoginWithOU
I
Similar to the userLoginSecure mode, a port in this mode
performs 802.1x authentication of users and services only
one user passing 802.1x authentication. The differences
include:
Such a port also permits frames from a wired user whose
MAC address contains a specified OUI (organizationally
unique identifier).
For frames from a wireless user, such a port performs OUI
check at first. If the OUI check fails, the port performs 802.1x
authentication.
macAddressWith
Radius
In this mode, a port performs RADIUS MAC authentication of
users.
macAddressOrUs
erLoginSecure
This mode is the combination of the userLoginSecure and
macAddressWithRadius modes, with 802.1x authentication
having a higher priority than MAC authentication.
For a user using a wired connection, the port performs MAC
authentication upon receiving non-802.1x frames and
performs 802.1x authentication first upon receiving 802.1x
frames. If 802.1x authentication fails, the port performs MAC
authentication.
For a wireless user, 802.1x authentication is performed first.
If 802.1x authentication fails, MAC authentication is
performed.
macAddressOrUs
erLoginSecureExt
This mode is similar to the macAddressOrUserLoginSecure
mode, except that there can be more than one 802.1x
authenticated user on the port.
macAddressElse
UserLoginSecure
This mode is the combination of the macAddressWithRadius
and userLoginSecure modes, with MAC authentication
having a higher priority than 802.1x authentication.
Upon receiving a non-802.1x frame, a port in this mode
performs only MAC authentication.
Upon receiving an 802.1x frame, the port performs MAC
authentication and then, if MAC authentication fails, 802.1x
authentication.
macAddressElse
UserLoginSecure
Ext
This mode is similar to the macAddressElseUserLoginSecure
mode, except that there can be more than one 802.1x/MAC
authenticated user on the port.
macAddressAnd
UserLoginSecure
To perform 802.1x authentication on the access user, MAC
authentication must be performed first. 802.1x authentication
can be performed on the access user only if MAC
authentication succeeds.
In this mode there can be only one authenticated user on the
port.
macAddressAnd
UserLoginSecure
Ext
This mode is similar to the macAddressAndUserLoginSecure
mode, except that there can be more than one authenticated
user on the port.
In any of these
modes, the
device triggers
the NTK and
Intrusion
Protection
features upon
detecting an
illegal packet
or illegal event.
