3Com WX3000 operation manual Security mode Description Feature

Security mode	Description	Feature
	In this mode, a port performs 802.1x authentication of users
userLoginSecure	and services only one user passing 802.1x authentication at
	a time.
userLoginSecure	In this mode, a port performs 802.1x authentication of users
Ext	and services users passing 802.1x authentication.
	Similar to the userLoginSecure mode, a port in this mode
	performs 802.1x authentication of users and services only
	one user passing 802.1x authentication. The differences
	include:
userLoginWithOU	Such a port also permits frames from a wired user whose
I	MAC address contains a specified OUI (organizationally
	unique identifier).
	For frames from a wireless user, such a port performs OUI
	check at first. If the OUI check fails, the port performs 802.1x
	authentication.
macAddressWith	In this mode, a port performs RADIUS MAC authentication of
Radius	users.
	This mode is the combination of the userLoginSecure and
	macAddressWithRadius modes, with 802.1x authentication
	having a higher priority than MAC authentication.
	For a user using a wired connection, the port performs MAC
macAddressOrUs	authentication upon receiving non-802.1x frames and	In any of these
	performs 802.1x authentication first upon receiving 802.1x	modes, the
erLoginSecure
	frames. If 802.1x authentication fails, the port performs MAC	device triggers
	authentication.	the NTK and
	For a wireless user, 802.1x authentication is performed first.	Intrusion
		Protection
	If 802.1x authentication fails, MAC authentication is
		features upon
	performed.
		detecting an
macAddressOrUs	This mode is similar to the macAddressOrUserLoginSecure	illegal packet
	mode, except that there can be more than one 802.1x	or illegal event.
erLoginSecureExt
	authenticated user on the port.
	This mode is the combination of the macAddressWithRadius
	and userLoginSecure modes, with MAC authentication
	having a higher priority than 802.1x authentication.
macAddressElse	Upon receiving a non-802.1x frame, a port in this mode
UserLoginSecure	performs only MAC authentication.
	Upon receiving an 802.1x frame, the port performs MAC
	authentication and then, if MAC authentication fails, 802.1x
	authentication.
macAddressElse	This mode is similar to the macAddressElseUserLoginSecure
UserLoginSecure	mode, except that there can be more than one 802.1x/MAC
Ext	authenticated user on the port.
	To perform 802.1x authentication on the access user, MAC
	authentication must be performed first. 802.1x authentication
macAddressAnd	can be performed on the access user only if MAC
UserLoginSecure	authentication succeeds.
	In this mode there can be only one authenticated user on the
	port.
macAddressAnd	This mode is similar to the macAddressAndUserLoginSecure
UserLoginSecure	mode, except that there can be more than one authenticated
Ext	user on the port.

1-3