H3c-technologies H3C WA3600 Series Access Points Manuel d'utilisateur télécharger pdf (Page 284)

271

Item Descri

tion

Port Mode

• mac-authentication—Perform MAC address authentication on users.

• mac-else-userlogin-secure—This mode is the combination of the mac-authentication and

userlogin-secure modes, with MAC authentication having a higher priority. Upon

receiving a non-802.1X frame, a port in this mode performs only MAC authentication;

upon receiving an 802.1X frame, the port performs MAC authentication and then, if MAC

authentication fails, 802.1X authentication.

• mac-else-userlogin-secure-ext—This mode is similar to the mac-else-userlogin-secure

mode, except that it supports multiple 802.1X and MAC authentication users on the port.

• userlogin-secure—In this mode, port-based 802.1X authentication is performed for users;

multiple 802.1X authenticated users can access the port, but only one user can be online.

• userlogin-secure-or-mac—This mode is the combination of the userlogin-secure and

mac-authentication modes, with 802.1X authentication having a higher priority. For a

wireless user, 802.1X authentication is performed first. If 802.1X authentication fails, MAC

authentication is performed.

• userlogin-secure-or-mac-ext—This mode is similar to the userlogin-secure-or-mac mode,

except that it supports multiple 802.1X and MAC authentication users on the port.

• userlogin-secure-ext—In this mode, a port performs 802.1X authentication on users in

macbased mode and supports multiple 802.1X users.

IMPORTANT:

There are multiple security modes. To remember them easily, follow these rules to understand

part of the port security modes:

• userLogin indicates port-based 802.1X authentication.

• mac indicates MAC address authentication.

• The authentication mode before Else is used preferentially. If the authentication fails, the

authentication after Else may be used depending on the protocol type of the packets to be

authenticated.

• The authentication mode before Or and that after Or have the same priority. The device

determines the authentication mode according to the protocol type of the packets to be

authenticated. For wireless users, the 802.1X authentication mode is used preferentially.

• userLogin together with Secure indicates MAC-based 802.1X authentication.

• A security mode with Ext allows multiple 802.1X users to pass the authentication. A

security mode without Ext allows only one 802.1X user to pass the authentication.

Max User Maximum number of users that can be connected to the network through a specific port.

a. Configure mac-authentication

1 2 ... 279 280 281 282 283 284 285 286 287 288 289 ... 446 447

Pas de commentaire

H3c-technologies H3C WA3600 Series Access Points Manuel d'utilisateur Page 284