HP 5120 EI Series Lan Switching Configuration Manual page 137

Step
6. Enable dynamic
MAC-based VLAN
assignment.
7. Configure VLAN
matching precedence.
8. Disable the PVID of the
port from forwarding
packets with unknown
source MAC addresses
that do not match any
MAC address-to-VLAN
entry.
To configure dynamic MAC-based VLAN:
Step
1. Enter system view.
2. Enter interface view or port
group view.
3. Configure the link type of the
ports as hybrid.
Configure the hybrid ports to
4.
permit packets from specific
MAC-based VLANs to pass
through.
5. Enable the MAC-based VLAN
feature.
6. Configure
802.1X/MAC/portal
authentication or any
combination.
Command
mac-vlan trigger enable
vlan precedence mac-vlan
port pvid disable
Command
system-view
•
Enter Layer 2 Ethernet
interface view:
interface interface-type
interface-number
•
Enter port group view:
port-group manual
port-group-name
port link-type hybrid
port hybrid vlan vlan-list
{ tagged | untagged }
mac-vlan enable
For more information, see
Security Command
Reference.
128
Remarks
By default, dynamic MAC-based
VLAN assignment is disabled.
When you use the mac-vlan trigger
enable command to enable dynamic
MAC-based VLAN assignment, HP
recommends that you configure the
vlan precedence mac-vlan command,
so that VLANs are assigned based on
single MAC addresses preferentially.
When dynamic MAC-based VLAN
assignment is enabled, HP does not
recommend configuring the vlan
precedence ip-subnet-vlan command,
which will make the system assign
VLANs based on IP subnets, because
the configuration does not take effect.
Optional.
By default, VLANs are preferentially
matched based on MAC addresses.
Optional.
By default, when a port receives a
packet with an unknown source MAC
address that does not match to any
MAC address-to-VLAN entry, it
forwards the packet in its PVID.
Remarks
N/A
Use either command.
•
The configuration made in Ethernet
interface view applies only to the port.
•
The configuration made in port group
view applies to all ports in the port
group.
By default, all ports are access ports.
By default, a hybrid port only permits the
packets of VLAN 1 to pass through.
Disabled by default.
N/A