89For wired users, the port performs 802.1X authentication upon receiving 802.1X frames, andperforms OUI check upon receiving non-802.1X frames.NOTE:An OUI is a 24-bit number that uniquely identifies a vendor, manufacturer, or organization. In MACaddresses, the first three octets are the OUI.Performing MAC authenticationmacAddressWithRadius: A port in this mode performs MAC authentication, and services multiple users.Performing a combination of MAC authentication and 802.1X authentication• macAddressOrUserLoginSecureThis mode is the combination of the macAddressWithRadius and userLoginSecure modes. It allowsone 802.1X authentication user and multiple MAC authentication users to log in.For wired users, the port performs MAC authentication upon receiving non-802.1X frames andperforms 802.1X authentication upon receiving 802.1X frames.• macAddressOrUserLoginSecureExtThis mode is similar to the macAddressOrUserLoginSecure mode, except that this mode supportsmultiple 802.1X and MAC authentication users.• macAddressElseUserLoginSecureThis mode is the combination of the macAddressWithRadius and userLoginSecure modes, withMAC authentication having a higher priority as the Else keyword implies. It allows one 802.1Xauthentication user and multiple MAC authentication users to log in.• macAddressElseUserLoginSecureExtThis mode is similar to the macAddressElseUserLoginSecure mode except that this mode supportsmultiple 802.1X and MAC authentication users as the keyword Ext implies.Configuration task listTasks at a glance Remarks(Required.) Enabling port security N/A(Optional.) Setting port security's limit on the number of secure MACaddresses on a port N/A(Required.) Setting the port security mode N/A(Required.) Configuring port security features:• Configuring NTK• Configuring intrusion protectionConfigure one or more port securityfeatures according to the networkrequirements.(Optional.) Configuring secure MAC addresses N/A(Optional.) Ignoring authorization information from the server N/AEnabling port securityBefore you enable port security, disable 802.1X and MAC authentication globally.
