HP 5820X series Configuration Manual page 123

Configuring dynamic MAC-based VLAN assignment
With dynamic MAC-based VLAN assignment enabled, packets are delivered to the CPU for processing.
The packet processing mode has the highest priority and overrides the configuration of MAC learning
limit and disabling of MAC address learning. When dynamic MAC-based VLAN assignment is enabled,
do not configure the MAC learning limit or disable MAC address learning.
Do not use dynamic MAC-based VLAN assignment together with 802.X and MAC authentication.
In dynamic MAC-based VLAN assignment, the port that receives a packet with an unknown source MAC
address can be successfully assigned to the matched VLAN only when the matched VLAN is a static
VLAN.
With MSTP enabled, if a port is blocked in the MSTI of the target MAC-based VLAN, the port drops the
received packets, instead of delivering them to the CPU. As a result, the receiving port will not be
dynamically assigned to the corresponding VLAN. Do not configure dynamic MAC-based VLAN
assignment together with MSTP, because the former is mainly configured on the access side.
When a MAC address ages, the receiving port automatically leaves the VLAN to which it was
dynamically assigned to. For more information about MAC address aging, see the chapter "MAC
address table configuration."
To configure dynamic MAC-based VLAN assignment:
To do...
1. Enter system view
2. Associate MAC addresses
with a VLAN
3. Enter
Ethernet
interface
view or
port
group
view
4. Configure the link type of
the ports as hybrid
5. Enable MAC-based VLAN
6. Configure VLAN matching
precedence
7. Enable dynamic MAC-
based VLAN assignment
Use the command...
system-view
mac-vlan mac-address mac-address
vlan vlan-id [ priority priority ]
Enter Ethernet interface interface-type interface-
interface view number
Enter port
port-group manual port-group-name
group view
port link-type hybrid
mac-vlan enable
vlan precedence mac-vlan
mac-vlan trigger enable
Remarks
—
Required.
With dynamic MAC-based VLAN
assignment enabled, a port is
automatically assigned to the VLAN
in the MAC address-to-VLAN entry
that is exactly matched by the source
MAC address of the packet received
on the port.
Use either command.
•
•
Required.
Required.
Disabled by default.
Optional.
By default, VLANs are preferably
matched based on MAC addresses.
Required.
Disabled by default.
116
The configuration made in
Ethernet interface view applies
only to the current port.
The configuration made in port
group view applies to all ports in
the port group.