HP 6600 Configuration Manual page 109

the source MAC address and each mask. If the result of an AND operation matches the
corresponding MAC address, the device tags the frame with the corresponding VLAN ID.
If the fuzzy match fails, the device performs an exact match. In the exact match, the device
searches the MAC address-to-VLAN entries whose masks are all-Fs. If the MAC address of a
MAC address-to-VLAN entry matches the source MAC address of the untagged frame, the
device tags the frame with the corresponding VLAN ID.
If no match is found, the device assigns a VLAN to the frame by using other criteria, such as IP
subnet or protocol, and forwards the frame.
If no VLAN is available, the device tags the frame with the PVID of the receiving port and
forwards the frame.
• When the port receives a tagged frame, the port forwards the frame if the VLAN ID of the frame is
permitted by the port, and otherwise it drops the frame.
Dynamic MAC-based VLAN assignment
When you cannot determine the target MAC-based VLANs of a port, you can use dynamic MAC-based
VLAN assignment on the port. To do that, you can create a MAC address-to-VLAN map containing
multiple MAC address-to-VLAN entries, and enable the MAC-based VLAN feature and dynamic
MAC-based VLAN assignment on the port.
Dynamic MAC-based VLAN assignment uses the following workflows, as shown in
1. When the port receives a frame, it first determines whether the frame is tagged.
• If yes, the port reports the source MAC address of the frame.
If not, the port selects a VLAN for the frame by tagging the untagged frame with the PVID tag and
•
obtaining the tag, and then reports the source MAC address of the frame.
2. After reporting the source MAC address of the frame, the port looks up the source MAC address
in the MAC-to-VLAN map, and processes the frame as follows:
If the source MAC address of the frame matches a MAC address-to-VLAN entry configured on the
•
port, the port checks whether the VLAN ID of the frame is the same as the VLAN in the
MAC-to-VLAN entry.
a. If yes, the port dynamically joins the VLAN and forwards the frame.
b. If not, the port drops the frame.
If the source MAC address of the frame matches no MAC-to-VLAN entry, the port processes the
•
frame depending on whether the VLAN ID of the frame is the PVID.
c. If yes, the port determines whether it allows PVID: if yes, the port forwards the frame within the
PVID; if not, the port drops the frame.
d. If not, the port assigns a VLAN to the frame by using other criteria, such as IP subnet or protocol,
and forwards the frame. If no VLAN is available, the port drops the frame.
100
Figure 35: