Configuring Server-Assigned Mac-Based Vlan; Configuring Ip Subnet-Based Vlans - H3C S7500E-X Configuration Manual

Step
Enable the MAC-based
5.
VLAN feature.
Enable dynamic
6.
MAC-based VLAN
assignment.
(Optional.) Configure the
7.
system to assign VLANs
based on the MAC address
preferentially.
(Optional.) Disable the port
8.
from forwarding packets
that fail the exact MAC
address match in its PVID.

Configuring server-assigned MAC-based VLAN

Step
Enter system view.
1.
Enter Layer 2 Ethernet
2.
interface view.
Configure the link type of the
3.
ports as hybrid.
Assign the hybrid port to the
4.
MAC-based VLANs.
Enable the MAC-based
5.
VLAN feature.
Configure 802.1X or MAC
6.
authentication.

Configuring IP subnet-based VLANs

In this method, untagged packets are assigned to VLANs based on their source IP addresses and
subnet masks. A port configured with IP subnet-based VLANs assigns a received untagged packet
to a VLAN based on the source address of the packet.
Command
mac-vlan enable
mac-vlan trigger enable
vlan precedence mac-vlan
port pvid forbidden
Command
system-view
interface interface-type
interface-number
port link-type hybrid
port hybrid vlan vlan-id-list
{ tagged | untagged }
mac-vlan enable
For more information, see Security
Command Reference.
125
Remarks
By default, MAC-based VLAN is
disabled.
By default, dynamic MAC-based
VLAN assignment is disabled.
The VLAN assignment for a port is
triggered only when the source MAC
address of its receiving packet
exactly matches the MAC address in
a MAC-to-VLAN entry.
By default, the system assigns
VLANs based on the MAC address
preferentially when both the
MAC-based VLAN and IP
subnet-based VLAN are configured
on a port.
By default, when a port receives
packets whose source MAC
addresses fail the exact match, the
port forwards them in its PVID.
Remarks
N/A
N/A
By default, all ports are access
ports.
By default, a hybrid port is an
untagged member of the VLAN
to which the port belongs when
its link type is access.
By default, MAC-based VLAN is
disabled.
N/A