HP 5120 EI Switch Series User Manual

143
3. macAddressElseUserLoginSecure
This mode is the combination of the macAddressWithRadius and userLoginSecure modes, with MAC
authentication having a higher priority as the Else keyword implies.
For non-802.1X frames, a port in this mode performs only MAC authentication. For 802.1X frames, it
performs MAC authentication and then, if the authentication fails, 802.1X authentication.
4. macAddressElseUserLoginSecureExt
This mode is similar to the macAddressElseUserLoginSecure mode except that a port in this mode
supports multiple 802.1X and MAC authentication users as the keyword Ext implies.
NOTE:
 The maximum number of users a port supports equals the maximum number of secure MAC addresses or the
maximum number of authenticated users the security mode supports, whichever is smaller.
 For more information about configuring MAC address table entries, see the Layer 2—LAN Switching Command
Reference .
Support for guest VLAN and Auth-Fail VLAN
An 802.1X guest VLAN is the VLAN that a user is in before initiating authentication. An 802.1X Auth-Fail
VLAN or a MAC authentication guest VLAN is the VLAN that a user is in after failing authentication.
Support for the guest VLAN and Auth-Fail VLAN features varies with security modes.
 You can use the 802.1X guest VLAN and 802.1X Auth-Fail VLAN features together with port security
modes that support 802.1X authentication. For more information about the 802.1X guest VLAN and
Auth-Fail VLAN on a port that performs MAC-based access control, see the chapter ―802.1X
configuration.‖
 You can use the MAC authentication VLAN feature together with security modes that support MAC
authentication. For more information about the MAC authentication guest VLAN, see the chapter
―MAC authentication configuration.‖
NOTE:
If you configure both an 802.1X Auth-Fail VLAN and a MAC authentication guest VLAN on a port that
performs MAC-based access control, the 802.1X Auth-Fail VLAN has a higher priority.
Port security configuration task list
Complete the following tasks to configure port security:
Task
Remarks
Enabling port security
Required
Setting the maximum number of secure MAC addresses
Optional
Setting the port security mode
Required
Configuring port security
features
Configuring NTK
Optional
Configure one or more
features as required.
Configuring intrusion protection
Configuring port security traps
Configuring secure MAC addresses
Optional

HP 5120 EI Switch Series Specifications

General

Brand	HP
Model	5120 EI Switch Series
Category	Switch
Language	English