H3C Technologies H3C WX6000 Series Access Controllers - Manual (Page 65)

7-10
The ways to create MAC address-based VLANs
A MAC address-based VLAN can be created in one of the following two ways.
z
Static configuration (through CLI)
You can associate MAC addresses and VLANs by using corresponding commands.
z
Auto configuration though the authentication server (that is, VLAN issuing)
The device associates MAC addresses and VLANs dynamically based on the information provided by
the authentication server. If a user goes offline, the corresponding MAC address-to-VLAN association is
removed automatically. Auto configuration requires MAC address-to–VLAN mapping relationship be
configured on the authentication server. For detailed information, refer to 802.1x-HABP-MAC
Authentication in H3C WX6103 Access Controller Switch Interface Board Configuration Guide.
The two configuration methods can be used at the same time, that is, you can configure a MAC
address-to-VLAN entry on both the local device and the authentication serer at the same time. Note that
the MAC address-to-VLAN entry configuration takes effect only when the configuration on the local
device is consistent with that on the authentication server.
Configuring a MAC Address-Based VLAN
MAC address-based VLANs are available only on Hybrid ports.
Follow these steps to configure a MAC address-based VLAN:
To do... Use the command... Remarks
Enter system view system-view —
Associate MAC addresses with
a VLAN mac-vlan mac-address mac-addr vlan
vlan-id [ priority priority ]
Required
Enter Ethernet
interface view interface interface-type
interface-number
Enter
Ethernet
interface
view or port
group view
Enter port group
view port-group { manual port-group-name |
aggregation agg-id }
Use either command.
The configuration performed in
Ethernet interface view applies to
the current port only; the
configuration performed in port
group view applies to all the ports
in the port group.
Configure the link type of the
port(s) as hybrid
port link-type hybrid Required
Configure the current hybrid
port(s) to permit packets of
specific MAC address-based
VLANs
port hybrid vlan vlan-id-list { tagged |
untagged }
Required
By default, a hybrid port only
permits the packets of VLAN 1.
Enable MAC address-based
VLAN
mac-vlan enable
Required
Disabled by default