H3C Technologies H3C S3600 Series Switches - Manual (Page 196)

1-6
Figure 1-3 Packet processing in security modes with the Else keyword
No
Fail
The port in a security
mode with Else receives
a packet
Is it an 802.1X packet?
Allow access to
authorized resources
Yes
Drop the packet
Succeed Fail
Succeed
Is the source
MAC in the MAC
address table?
Forward the packet
Yes
No
Perform MAC
authentication
Perform 802.1X
authentication
Security mode with the Or keyword
z macAddressOrUserLoginSecure: A port in this mode performs MAC authentication upon
receiving non-802.1X frames and performs 802.1X authentication upon receiving 802.1X frames.
802.1X authentication can be applied to users who have already passed MAC authentication. The
port in this mode supports up to one 802.1X online user, but supports multiple MAC authenticated
online users.
z macAddressOrUserLoginSecureExt: Similar to the macAddressOrUserLoginSecure mode
except that a port in this mode supports multiple 802.1X online users.
Figure 1-4 shows how the port processes packets in a security mode with the Or keyword.