Configuring A Mac-Based Vlan - H3C SR8800 Configuration Manual

MAC-based VLAN on the router, you must configure the MAC address-to-VLAN entries on the access
authentication server.
When a user passes authentication of the access authentication server, the router obtains VLAN
information from the server, generates a MAC address-to-VLAN entry by using the source MAC address
of the user packet and the VLAN information, and assigns the port to the MAC-based VLAN. When the
user goes offline, the router automatically deletes the MAC address-to-VLAN entry, and removes the port
from the MAC-based VLAN.
NOTE:
For more information about access authentication, see

Configuring a MAC-based VLAN

NOTE:
The router supports MAC-based VLAN only when its system working mode is SPC.
•
MAC-based VLANs are available only on hybrid ports.
•
Because MAC-based dynamic port assignment is mainly configured on the downlink ports of user
•
access devices, do not enable this function together with link aggregation.
To configure static MAC-based VLAN assignment:
Step
1. Enter system view.
2. Associate MAC addresses with a
VLAN.
3. Enter Ethernet interface view or
port group view.
4. Configure the link type of the
port(s) as hybrid.
5. Configure the current hybrid
port(s) to permit packets of
specific MAC-based VLANs to
pass through.
6. Enable the MAC-based VLAN
feature.
To configure dynamic MAC-based VLAN:
Step
1. Enter system view.
Security Configuration Guide
Command
system-view
mac-vlan mac-address
mac-address vlan vlan-id [ priority
priority ]
•
Enter Ethernet interface view:
interface interface-type
interface-number
•
Enter port group view:
port-group manual
port-group-name
port link-type hybrid
port hybrid vlan vlan-id-list { tagged
| untagged }
mac-vlan enable
Command
system-view
14
.
Remarks
N/A
N/A
Use either command.
N/A
By default, a hybrid port only
permits the packets of VLAN 1
to pass through.
By default, the MAC-based
VLAN feature is disabled.
Remarks
N/A