Configuring A Mac-Based Vlan - HP A6600 Configuration Manual

removed automatically. Automatic configuration requires MAC address-to–VLAN mapping be configured
on the authentication server. For more information, see 802.1X in the Security Configuration Guide.
The two configuration approaches can be used at the same time, that is, you can configure a MAC
address-to-VLAN entry on both the local router and the authentication server at the same time. Note that
the MAC address-to-VLAN entry configuration takes effect only when the configuration on the local router
is consistent with that on the authentication server. Otherwise, the previous configuration takes effect.

Configuring a MAC-based VLAN

MAC-based VLANs are available only on hybrid ports.
With dynamic MAC-based VLAN assignment enabled, packets are delivered to the CPU for processing.
The packet processing mode has the highest priority and overrides the configuration of MAC learning
limit and disabling of MAC address learning. When dynamic MAC-based VLAN assignment is enabled,
do not configure the MAC learning limit or disable MAC address learning.
Do not use dynamic MAC-based VLAN assignment together with 802.X and MAC authentication.
In dynamic MAC-based VLAN assignment, the port that receives a packet with an unknown source MAC
address can be successfully assigned to the matched VLAN only when the matched VLAN is a static
VLAN.
The MAC-based VLAN feature is mainly configured on the downlink ports of the user access devices. Do
not enable this function together with link aggregation.
With MSTP enabled, if a port is blocked in the MSTI of the target MAC-based VLAN, the port drops the
received packets, instead of delivering them to the CPU. As a result, the receiving port is not assigned
dynamically to the corresponding VLAN. Do not configure dynamic MAC-based VLAN assignment
together with MSTP, because the former is mainly configured on the access side.
To configure static MAC-based VLAN assignment:
To do...
1. Enter system view
2. Associate a specific MAC
address with a VLAN
3. Enter
interface
view or
port
group
view
4. Configure the link type of
the ports as hybrid
5. Configure the hybrid ports
to permit packets from
specific MAC-based
VLANs to pass through
Use the command...
system-view
mac-vlan mac-address mac-address
[ mask mac-mask ] vlan vlan-id
[ priority priority ]
Enter Ethernet interface interface-type
interface view interface-number
Enter port
port-group manual port-group-name
group view
port link-type hybrid
port hybrid vlan vlan-id-list { tagged
| untagged }
Remarks
—
Required.
Use either command.
•
•
Required.
Required.
By default, a hybrid port only
permits the packets from VLAN 1 to
pass through.
99
The configuration made in
Ethernet interface view applies
only to the current port.
The configuration made in port
group view applies to all ports in
the port group.