Configuring Mac-Based Vlans; Introduction - H3C S7500E-X Configuration Manual

Configuring MAC-based VLANs

Introduction

This feature is available only on hybrid ports.
The MAC-based VLAN feature assigns hosts to a VLAN based on their MAC addresses. This feature
is also called user-based VLAN because VLAN configuration remains the same regardless of a
user's physical location.
Static MAC-based VLAN assignment
Use static MAC-based VLAN assignment in networks that have a small number of VLAN users. To
configure static MAC-based VLAN assignment on a port, perform the following tasks:
Create MAC-to-VLAN entries.
1.
Enable the MAC-based VLAN feature on the port.
2.
Assign the port to the MAC-based VLAN.
3.
A port configured with static MAC-based VLAN assignment processes a received frame as follows
before sending the frame out:
•
For an untagged frame, the port determines its VLAN ID in the following workflow:
a. The port first performs a fuzzy match as follows:
− Searches for the MAC-to-VLAN entries whose masks are not all Fs.
− Performs a logical AND operation on the source MAC address and each of these
b. If the fuzzy match fails, the port performs an exact match. It searches for MAC-to-VLAN
entries whose masks are all Fs. If the source MAC address of the frame exactly matches the
MAC address of a MAC-to-VLAN entry, the port tags the frame with the VLAN ID specific to
this entry.
c. If no matching VLAN ID is found, the port determines the VLAN for the packet by using the
following VLAN match order:
− IP subnet-based VLAN.
− Protocol-based VLAN.
− Port-based VLAN.
When a match is found, the port tags the packet with the matching VLAN ID.
•
For a tagged frame, the port determines whether the VLAN ID of the frame is permitted on the
port.
If the VLAN ID of the frame is permitted on the port, the port forwards the frame.
If the VLAN ID of the frame is not permitted on the port, the port drops the frame.
Dynamic MAC-based VLAN assignment
When you cannot determine the target MAC-based VLANs of a port, use dynamic MAC-based VLAN
assignment on the port. To use dynamic MAC-based VLAN assignment, perform the following tasks:
Create MAC-to-VLAN entries.
1.
Enable the MAC-based VLAN feature on the port.
2.
Enable dynamic MAC-based VLAN assignment on the port.
3.
Dynamic MAC-based VLAN assignment uses the following workflow, as shown in
When a port receives a frame, it first determines whether the frame is tagged.
4.
masks.
If an AND operation result matches the MAC address in a MAC-to-VLAN entry, the port
tags the frame with the VLAN ID specific to this entry.
121
Figure 38: