Configuring Dynamic Mac-Based Vlan Assignment - H3C S7500E-X Configuration Manual

Step
Configure the link type of
4.
the port as hybrid.
Assign the hybrid port to
5.
the MAC-based VLANs.
Enable the MAC-based
6.
VLAN feature.
(Optional.) Configure the
7.
system to assign VLANs
based on the MAC
address preferentially.

Configuring dynamic MAC-based VLAN assignment

Configuration restrictions and guidelines
When you configure dynamic MAC-based VLAN assignment, follow these restrictions and guideline:
•
As a best practice to ensure correct operation of 802.1X and MAC authentication, do not use
dynamic MAC-based VLAN assignment with 802.1X or MAC authentication.
•
When dynamic MAC-based VLAN assignment is enabled on a port, the configuration of MAC
learning limit and disabling of MAC address learning do not take effect.
•
For successful dynamic MAC-based VLAN assignment, use static VLANs when you create
MAC-to-VLAN entries.
•
As a best practice, do not use dynamic MAC-based VLAN assignment with MSTP. In MSTP
mode, if a port is blocked in the MSTI of its target VLAN, the port drops the received packets
instead of delivering them to the CPU. As a result, the port will not be dynamically assigned to
the target VLAN.
•
As a best practice, do not use dynamic MAC-based VLAN assignment with PVST. In PVST
mode, if the target VLAN of a port is not permitted on the port, the port is placed in blocked state.
The port drops the received packets instead of delivering them to the CPU. As a result, the port
will not be dynamically assigned to the target VLAN.
•
As a best practice, do not configure both dynamic MAC-based VLAN assignment and automatic
voice VLAN assignment mode on a port. They can have a negative impact on each other.
Configuration procedure
To configure dynamic MAC-based VLAN assignment:
Step
Enter system view.
1.
Create a MAC-to-VLAN
2.
entry.
Enter Layer 2 Ethernet
3.
interface view.
Configure the link type of
4.
the port as hybrid.
Command
port link-type hybrid
port hybrid vlan vlan-id-list { tagged |
untagged }
mac-vlan enable
vlan precedence mac-vlan
Command
system-view
mac-vlan mac-address
mac-address vlan vlan-id
[ dot1q priority ]
interface interface-type
interface-number
port link-type hybrid
124
Remarks
By default, all ports are access
ports.
By default, a hybrid port is an
untagged member of the VLAN
to which the port belongs when
its link type is access.
By default, this feature is
disabled.
By default, the system assigns
VLANs based on the MAC
address preferentially when both
the MAC-based VLAN and IP
subnet-based VLAN are
configured on a port.
Remarks
N/A
By default, no MAC-to-VLAN entry
exists.
N/A
By default, all ports are access
ports.