Configuring mac-based vlans, Introduction, Static mac-based vlan assignment – H3C Technologies H3C S5560 Series Switches User Manual
Page 161
127
Step Command
Remarks
2.
Enter interface view.
•
Enter Layer 2 Ethernet interface
view:
interface interface-type
interface-number
•
Enter Layer 2 aggregate
interface view:
interface bridge-aggregation
interface-number
•
The configuration made in
Layer 2 Ethernet interface view
applies only to the port.
•
The configuration made in
Layer 2 aggregate interface
view applies to the aggregate
interface and its aggregation
member ports. If the system fails
to apply the configuration to an
aggregation member port, it
skips the port and moves to the
next member port. If the system
fails to apply the configuration
to the aggregate interface, it
stops applying the
configuration to aggregation
member ports.
3.
Configure the link type of the
port as hybrid.
port link-type hybrid
By default, all ports are access
ports.
4.
Assign the hybrid port to the
specified VLANs.
port hybrid vlan vlan-id-list
{ tagged | untagged }
By default, a hybrid port is an
untagged member of the VLAN to
which the port belongs when its
link type is access.
5.
(Optional.) Configure the
PVID of the hybrid port.
port hybrid pvid vlan vlan-id
By default, the PVID of a hybrid
port is the ID of the VLAN to which
the port belongs when its link type
is access.
Configuring MAC-based VLANs
Introduction
This feature is available only on hybrid ports.
The MAC-based VLAN feature assigns hosts to a VLAN based on their MAC addresses. This feature is
usually used with security technologies such as 802.1X to provide secure and flexible network access for
terminal devices.
Static MAC-based VLAN assignment
Use static MAC-based VLAN assignment in networks that have a small number of VLAN users. To
configure static MAC-based VLAN assignment on a port, perform the following tasks:
1.
Create MAC-to-VLAN entries.
2.
Enable the MAC-based VLAN feature on the port.
3.
Assign the port to the MAC-based VLAN.
A port configured with static MAC-based VLAN assignment processes a received frame as follows before
sending the frame out:
•
For an untagged frame, the port determines its VLAN ID in the following workflow: