Configuring Server-Assigned Mac-Based Vlan; Configuring Ip Subnet-Based Vlans - H3C S7500X Series Configuration Manual

Step
7. (Optional.) Configure
the system to assign
VLANs based on the
MAC address
preferentially.
8. (Optional.) Disable the
port from forwarding
packets that fail the
exact MAC address
match in its PVID.

Configuring server-assigned MAC-based VLAN

Step
1. Enter system view.
2. Enter Layer 2 Ethernet
interface view or Layer
2 aggregate interface
view.
3. Set the port link type to
hybrid.
4. Assign the hybrid port
to the MAC-based
VLANs.
5. Enable the
MAC-based VLAN
feature.
6. Configure 802.1X or
MAC authentication.

Configuring IP subnet-based VLANs

In this method, untagged packets are assigned to VLANs based on their source IP addresses and
subnet masks. A port configured with IP subnet-based VLANs assigns a received untagged packet
to a VLAN based on the source address of the packet.
Use this feature when untagged packets from an IP subnet or IP address must be transmitted in a
VLAN.
This feature is available only on hybrid ports, and it processes only untagged packets.
An IP subnet-based VLAN has one or multiple subnets to match inbound packets. Each subnet has
a unique index in the IP subnet-based VLAN. All subnets in an IP subnet-based VLAN have the
same VLAN ID.
To configure an IP subnet-based VLAN:
Command
vlan precedence mac-vlan
port pvid forbidden
Command
system-view
interface interface-type interface-number
port link-type hybrid
port hybrid vlan vlan-id-list { tagged |
untagged }
mac-vlan enable
For more information, see Security
Command Reference.
12
Remarks
By default, the system assigns
VLANs based on the MAC
address preferentially when
both the MAC-based VLAN and
IP subnet-based VLAN are
configured on a port.
By default, when a port
receives packets whose source
MAC addresses fail the exact
match, the port forwards them
in its PVID.
Remarks
N/A
N/A
By default, all ports are
access ports.
By default, a hybrid port is an
untagged member of the
VLAN to which the port
belongs when its link type is
access.
By default, MAC-based VLAN
is disabled.
N/A