H3C Technologies H3C WX5500E Series Access Controllers - Manual (Page 136)

125
Configure MAC-based VLANs, so that each laptop is able to access only its own department server, no
matter which meeting room it is used in.
Figure 38 Network diagram
Configuration considerations
• Create VLANs 100 and 200.
• Configure the uplink ports of Device A and Device C as trunk ports, and assign them to VLANs 100
and 200.
• Configure the downlink ports of Device B as trunk ports, and assign them to VLANs 100 and 200.
Assign the uplink ports of Device B to VLANs 100 and 200.
• Associate the MAC address of Laptop 1 with VLAN 100, and associate the MAC address of Laptop
2 with VLAN 200.
Configuration procedure
1. Configure Device A:
# Create VLANs 100 and 200.
<DeviceA> system-view
[DeviceA] vlan 100
[DeviceA-vlan100] quit
[DeviceA] vlan 200
[DeviceA-vlan200] quit
# Associate the MAC address of Laptop 1 with VLAN 100, and associate the MAC address of
Laptop 2 with VLAN 200.
[DeviceA] mac-vlan mac-address 000d-88f8-4e71 vlan 100
[DeviceA] mac-vlan mac-address 0014-222c-aa69 vlan 200
# Configure GigabitEthernet 1/0/1 as a hybrid port that sends packets of VLANs 100 and 200
untagged, and enable the MAC-based VLAN feature on it, so that Laptop 1 and Laptop 2 can
access the network through GigabitEthernet 1/0/1.
Device A
Device C
Device B
Server1
IP: 1.1.1.1/24
Server2
IP: 1.1.2.1/24
GE1/0/1 GE1/0/1
Laptop1
IP: 1.1.1.2/24
MAC: 000d-88f8-4e71
Laptop2
IP: 1.1.2.2/24
MAC: 0014-222c-aa69
VLAN 100 VLAN 200
GE1/0/2 GE1/0/2
GE1/0/3 GE1/0/4
GE1/0/14 GE1/0/13
VLAN 100 VLAN 200