General Configuration Restrictions And Guidelines; Configuring Static Mac-Based Vlan Assignment; Configuring Dynamic Mac-Based Vlan Assignment - H3C S7500X Series Configuration Manual

2. Assigns the port that connects the user to the MAC-based VLAN.
When the user goes offline, the device automatically deletes the MAC-to-VLAN entry and removes
the port from the MAC-based VLAN. For more information about 802.1X and MAC authentication,
see Security Configuration Guide.

General configuration restrictions and guidelines

When you configure MAC-based VLANs, follow these restrictions and guideline:
•
Do not configure a VLAN as both a super VLAN and a MAC-based VLAN.
•
The MAC-based VLAN feature is mainly configured on downlink ports of user access devices.
Member ports of an aggregation group do not support this feature.
•
Layer 2 aggregate interfaces do not support dynamic MAC-based VLAN assignment.

Configuring static MAC-based VLAN assignment

Step
1. Enter system view.
2. Create a MAC-to-VLAN
entry.
3. Enter Layer 2 Ethernet
interface view or Layer 2
aggregate interface
view.
4. Set the port link type to
hybrid.
5. Assign the hybrid port to
the MAC-based VLANs.
6. Enable the MAC-based
VLAN feature.
7. (Optional.) Configure
the system to assign
VLANs based on the
MAC address
preferentially.

Configuring dynamic MAC-based VLAN assignment

Configuration restrictions and guidelines
When you configure dynamic MAC-based VLAN assignment, follow these restrictions and guideline:
•
In an IRF 3.1 system, as a best practice, do not modify the PVID of an interface on a PEX after
you enable dynamic MAC-based VLAN assignment on the interface. Otherwise, packet
forwarding errors occur. To resolve this problem, execute the following commands sequence on
the interface:
a. undo mac-vlan trigger enable
Command
system-view
mac-vlan mac-address mac-address
[ mask mac-mask ] vlan vlan-id [ dot1p
priority ]
interface interface-type interface-number
port link-type hybrid
port hybrid vlan vlan-id-list { tagged |
untagged }
mac-vlan enable
vlan precedence mac-vlan
10
Remarks
N/A
By default, no MAC-to-VLAN
entries exist.
N/A
By default, all ports are access
ports.
By default, a hybrid port is an
untagged member of the
VLAN to which the port
belongs when its link type is
access.
By default, this feature is
disabled.
By default, the system assigns
VLANs based on the MAC
address preferentially when
both the MAC-based VLAN
and IP subnet-based VLAN
are configured on a port.