Step
2.
Enter interface view or port
group view.
3.
Configure the link type of the
ports as hybrid.
4.
Configure the hybrid ports to
permit packets from specific
MAC-based VLANs to pass
through.
5.
Enable the MAC-based VLAN
feature.
6.
Configure
802.1X/MAC/portal
authentication or any
combination.
MAC-based VLAN configuration example
Network requirements
As shown in
GigabitEthernet 4/0/1 of Router A and Router C are each connected to a meeting room. Laptop
•
1 and Laptop 2 are used for meetings and might be used in either of the two meeting rooms.
Different departments own Laptop 1 and Laptop 2. The two departments use VLAN 100 and VLAN
•
200, respectively.
•
The MAC address of Laptop 1 is 000D-88F8-4E71, and that of Laptop 2 is 0014-222C-AA69.
Configure MAC-based VLANs, so that each laptop is able to access only its own department server, no
matter which meeting room it is used in.
Figure
36:
Command
•
Enter interface view:
interface interface-type
interface-number
•
Enter port group view:
port-group manual
port-group-name
port link-type hybrid
port hybrid vlan vlan-list { tagged
| untagged }
mac-vlan enable
For more information, see
Security Command Reference.
103
Remarks
Use one of the commands.
•
The configuration made in
Ethernet interface view applies
only to the port.
•
The configuration made in port
group view applies to all ports in
the port group.
By default, all ports are access
ports.
By default, a hybrid port only
permits the packets of VLAN 1 to
pass through.
By default, MAC-based VLAN is
disabled.
N/A