General Configuration Restrictions And Guidelines; Configuring Static Mac-Based Vlan Assignment - H3C S7500E-X Configuration Manual

When you configure dynamic MAC-based VLAN assignment, follow these guidelines:
•
When a port joins a VLAN specified in the MAC-to-VLAN entry, one of the following events
occurs depending on the port configuration:
If the port has not been configured to allow packets from the VLAN to pass through, the port
joins the VLAN as an untagged member.
If the port has been configured to allow packets from the VLAN to pass through, the port
configuration remains the same.
•
If you configure both static and dynamic MAC-based VLAN assignments on a port, dynamic
MAC-based VLAN assignment takes effect.
•
The 802.1p priority of the VLAN in a MAC-to-VLAN entry determines the transmission priority of
the matching packets.
Server-assigned MAC-based VLAN
Use this feature with access authentication, such as MAC-based 802.1X authentication, to
implement secure and flexible terminal access.
To implement server-assigned MAC-based VLAN, perform the following tasks:
Configure the server-assigned MAC-based VLAN feature on the access device.
1.
Configure username-to-VLAN entries on the access authentication server.
2.
When a user passes authentication of the access authentication server, the server assigns the
authorization VLAN information for the user to the device. The device then performs the following
operations:
Generates a MAC-to-VLAN entry by using the source MAC address of the user packet and the
3.
authorization VLAN information. The authorization VLAN is a MAC-based VLAN.
The generated MAC-to-VLAN entry cannot conflict with the existing static MAC-to-VLAN
entries. If a confliction exists, the dynamic MAC-to-VLAN entry cannot be generated.
Assigns the port that connects the user to the MAC-based VLAN.
4.
When the user goes offline, the device automatically deletes the MAC-to-VLAN entry and removes
the port from the MAC-based VLAN. For more information about 802.1X and MAC authentication,
see Security Configuration Guide.

General configuration restrictions and guidelines

When you configure MAC-based VLANs, follow these restrictions and guideline:
•
Do not configure a VLAN as both a super VLAN and a MAC-based VLAN.
•
The MAC-based VLAN feature is mainly configured on downlink ports of user access devices.
Do not use this feature with link aggregation.
•
EVB is not supported on a port that is enabled with the MAC-based VLAN feature. For more
information about EVB, see EVB Configuration Guide.

Configuring static MAC-based VLAN assignment

Step
Enter system view.
1.
Create a MAC-to-VLAN
2.
entry.
Enter Layer 2 Ethernet
3.
interface view.
Command
system-view
mac-vlan mac-address mac-address
[ mask mac-mask ] vlan vlan-id
[ dot1q priority ]
interface interface-type
interface-number
123
Remarks
N/A
By default, no MAC-to-VLAN
entry exists.
N/A