H3C Technologies H3C S3600 Series Switches - Manual (Page 194)

1-4
z userLoginWithOUI: Similar to the userLoginSecure mode, however, a port in this mode also
permits frames from a user whose MAC address contains a specified OUI (organizationally unique
identifier).
For description of 802.1X authentication, refer to 802.1x and System Guard Operation.
MAC authentication
macAddressWithRadius: A port in this mode performs MAC authentication for users.
For description of MAC authentication, refer to MAC Address Authentication Operation.
Security modes with the And keyword
z macAddressAndUserLoginSecure: A port in this mode first performs MAC authentication for a
user and then, if the user passes MAC authentication, performs 802.1X authentication. A user can
access the network only after passing both authentications. The port supports up to one online
802.1X user.
z macAddressAndUserLoginSecureExt: Similar to the macAddressAndUserLoginSecure
mode except that a port in this mode supports multiple users, as the Ext keyword implies.
Figure 1-2 shows how the port processes packets in a security mode with the And keyword.