1-5z userLogin specifies port-based 802.1X authentication.z macAddress specifies MAC address authentication.z Else specifies that the authentication method before Else is applied first. If the authentication fails,the protocol type of the authentication request determines whether to turn to the authenticationmethod following the Else.z In a security mode with Or, the protocol type of the authentication request determines whichauthentication method is to be used. However, 802.1X authentication is preferred by wirelessusers.z userLogin with Secure specifies MAC-based 802.1X authentication.z Ext indicates allowing multiple 802.1X users to be authenticated and get online. A security modewithout Ext allows only one 802.1X user to be authenticated and get online.Support for Guest VLANA MAC authentication guest VLAN is the VLAN that a user is in after failing authentication.For a security mode that supports MAC authentication, you can configure a MAC-based guest VLAN(MAC authentication MGV). For details about MAC authentication MGV, refer to MAC AuthenticationConfiguration in the Security Volume.Port Security Configuration Task ListComplete the following tasks to configure port security:Task RemarksEnabling Port Security RequiredSetting the Maximum Number of Secure MAC Addresses OptionalSetting the Port Security Mode RequiredConfiguring NTKConfiguring Intrusion ProtectionConfiguring Port Security FeaturesConfiguring TrappingOptionalChoose one ormore features asrequired.Configuring Secure MAC Addresses OptionalIgnoring Authorization Information from the Server OptionalEnabling Port SecurityConfiguration PrerequisitesBefore enabling port security, you need to disable 802.1X and MAC authentication globally.Configuration ProcedureFollow these steps to enable port security:To do… Use the command… RemarksEnter system view system-view —
