Mac-Based Vlan Configuration; Introduction To Mac-Based Vlan; Approaches To Creating Mac Address-To-Vlan Mappings; Configuring A Mac Address-Based Vlan - H3C S5120-EI Series Operation Manual

MAC-Based VLAN Configuration

Introduction to MAC-Based VLAN

MAC-based VLANs group VLAN members by MAC address. They only apply to untagged frames.
When receiving an untagged frame, the device looks up the list of MAC-to-VLAN mappings based on
the MAC address of the frame for a match. If a match is found, the system forwards the frame in the
corresponding VLAN. If no match is found, the system looks up other types of VLANs to make the
forwarding decision.
MAC-based VLANs are mostly used in conjunction with security technologies such as 802.1X to
provide secure, flexible network access for terminal devices.

Approaches to Creating MAC Address-to-VLAN Mappings

In addition to creating MAC address-to-VLAN mappings at the CLI, you can use an authentication
server to automatically issue MAC address-to-VLAN mappings.
Manually Static configuration (through CLI)
You can associate MAC addresses with VLANs by using corresponding commands.
Automatic configuration through the authentication server (that is, VLAN issuing)
The device associates MAC addresses with VLANs dynamically based on the information provided by
the authentication server. If a user goes offline, the corresponding MAC address-to-VLAN association is
removed automatically. Automatic configuration requires MAC address-to–VLAN mapping be
configured on the authentication server. For detailed information, refer to 802.1X Configuration in the
Security Volume.
The two configuration approaches can be used at the same time, that is, you can configure a MAC
address-to-VLAN entry on both the local device and the authentication server at the same time. Note
that the MAC address-to-VLAN entry configuration takes effect only when the configuration on the local
device is consistent with that on the authentication server. Otherwise, the previous configuration takes
effect.

Configuring a MAC Address-Based VLAN

MAC-based VLANs are available only on hybrid ports.
Follow these steps to configure a MAC-based VLAN:
To do...
Enter system view
Associate MAC addresses
with a VLAN
Use the command...
system-view
mac-vlan mac-address
mac-address vlan vlan-id [ priority
priority ]
1-10
Remarks
—
Required