Configuring Mac-Based Vlans; Introduction - H3C S5560S-EI Series Configuration Manual

Step
5.
(Optional.) Set the
PVID for the hybrid
port.

Configuring MAC-based VLANs

Introduction

This feature is available only on hybrid ports.
The MAC-based VLAN feature assigns hosts to a VLAN based on their MAC addresses. This feature
is also called user-based VLAN because VLAN configuration remains the same regardless of a
user's physical location.
Static MAC-based VLAN assignment
Use static MAC-based VLAN assignment in networks that have a small number of VLAN users. To
configure static MAC-based VLAN assignment on a port, perform the following tasks:
1.
Create MAC-to-VLAN entries.
2.
Enable the MAC-based VLAN feature on the port.
3.
Assign the port to the MAC-based VLAN.
A port configured with static MAC-based VLAN assignment processes a received frame as follows
before sending the frame out:
•
For an untagged frame, the port determines its VLAN ID in the following workflow:
a. The port first performs an exact match. It searches for MAC-to-VLAN entries whose masks
are all Fs. If the source MAC address of the frame exactly matches the MAC address of a
MAC-to-VLAN entry, the port tags the frame with the VLAN ID specific to this entry.
b. If the exact match fails, the port performs a fuzzy match as follows:
− Searches for the MAC-to-VLAN entries whose masks are not all Fs.
− Performs a logical AND operation on the source MAC address and each of these
c. If no matching VLAN ID is found, the port determines the VLAN for the packet by using the
following VLAN match order:
− Protocol-based VLAN.
− Port-based VLAN.
When a match is found, the port tags the packet with the matching VLAN ID.
•
For a tagged frame, the port determines whether the VLAN ID of the frame is permitted on the
port.
If the VLAN ID of the frame is permitted on the port, the port forwards the frame.
If the VLAN ID of the frame is not permitted on the port, the port drops the frame.
Dynamic MAC-based VLAN assignment
When you cannot determine the target MAC-based VLANs of a port, use dynamic MAC-based VLAN
assignment on the port. To use dynamic MAC-based VLAN assignment, perform the following tasks:
1.
Create MAC-to-VLAN entries.
Command
port hybrid pvid vlan vlan-id
masks.
If an AND operation result matches the MAC address in a MAC-to-VLAN entry, the port
tags the frame with the VLAN ID specific to this entry.
131
Remarks
By default, the PVID of a
hybrid port is the ID of the
VLAN to which the port
belongs when its link type is
access.