Mac-Based Vlan Configuration Example - HP 5820X series Configuration Manual

To do...
8. Disable the default VLAN
of the port from
forwarding source-
unknown packets that do
not match any MAC
address-to-VLAN mapping
When you use the mac-vlan trigger enable command to enable dynamic MAC-based VLAN assignment,
HP recommends that you configure the vlan precedence mac-vlan command, so that VLANs are assigned
based on single MAC addresses preferentially. When dynamic MAC-based VLAN assignment is enabled,
HP does not recommend configuring the vlan precedence ip-subnet-vlan command, which will make the
system assign VLANs based on IP subnets, because the configuration does not take effect.
Dynamic MAC-based VLAN assignment works only when an exact match is found, or in other words,
when the source MAC address of an untagged incoming packet matches a MAC address-to-VLAN entry
whose mask is all Fs. In this case, the port adds the source MAC address to its MAC address table, and
automatically joins the matched VLAN. Dynamic MAC-based VLAN assignment does not work when no
match or a fuzzy match (mask of the matched entry is not all Fs) is found.
Configuring dynamic MAC-based VLAN
After enabling MAC-based VLAN on the switch, you must configure related authentication settings on the
access authentication server. For more information about 802.1X authentication, see the Security
Configuration Guide.
To configure dynamic MAC-based VLAN:
To do...
1. Enter system view
2. Enter
Ethernet
interface
view or
port group
view
3. Configure the link type of
the ports as hybrid
4. Enable MAC-based VLAN

MAC-based VLAN configuration example

Network requirements
As shown in
•
meeting room. Laptop 1 and Laptop 2 are used for meeting and may be used in any of the two
meeting rooms.
Use the command...
port pvid disable
Use the command...
system-view
Enter
Ethernet interface interface-type interface-
interface number
view
Enter port
port-group manual port-group-name
group view
port link-type hybrid
mac-vlan enable
Figure 39, GigabitEthernet 1/0/1 of Device A and Device C are each connected to a
Remarks
Optional.
By default, source MAC unknown
packets are forwarded in the default
VLAN of the incoming port if they do
not match any MAC address-to-
VLAN mapping.
Remarks
—
Use either command.
•
•
Required.
Required.
Disabled by default.
117
The configuration made in
Ethernet interface view applies
only to the current port.
The configuration made in port
group view applies to all ports in
the port group.