1-4Security mode Description FeaturemacAddressElseUserLoginSecureIn this mode, a port performs MACauthentication of an access user first. If theauthentication succeeds, the user isauthenticated. Otherwise, the port performs802.1x authentication of the user.In this mode, there can be only one802.1x-authenticated user on the port, butthere can be several MAC-authenticatedusers.macAddressElseUserLoginSecureExtThis mode is similar to themacAddressElseUserLoginSecure mode,except that there can be more than one802.1x-authenticated user on the port.macAddressAndUserLoginSecureIn this mode, a port firstly performs MACauthentication for a user and then performs802.1x authentication for the user if the userpasses MAC authentication. The user canaccess the network after passing the twoauthentications.In this mode, up to one user can access thenetwork.macAddressAndUserLoginSecureExtThis mode is similar to themacAddressAndUserLoginSecure mode,except that more than one user can accessthe network.z When the port operates in the userlogin-withoui mode, Intrusion Protection will not be triggeredeven if the OUI address does not match.z On a port operating in either the macAddressElseUserLoginSecure mode or themacAddressElseUserLoginSecureExt mode, Intrusion Protection is triggered only after bothMAC-based authentication and 802.1x authentication on the same packet fail.Port Security Configuration Task ListComplete the following tasks to configure port security:Task RemarksEnabling Port Security RequiredSetting the Maximum Number of MAC Addresses Allowed on a Port OptionalSetting the Port Security Mode RequiredConfiguring the NTK featureConfiguring intrusion protectionConfiguring PortSecurityFeatures Configuring the Trap featureOptionalChoose one or morefeatures as required.
