Configuring A Mac Address-Based Vlan - HP 4800G Series Configuration Manual

The device associates MAC addresses with VLANs dynamically based on the information provided by
the authentication server. If a user goes offline, the corresponding MAC address-to-VLAN association is
removed automatically. Automatic configuration requires MAC address-to–VLAN mapping be
configured on the authentication server. For detailed information, refer to 802.1X Configuration in the
Security Volume.
The two configuration approaches can be used at the same time, that is, you can configure a MAC
address-to-VLAN entry on both the local device and the authentication server at the same time. Note
that the MAC address-to-VLAN entry configuration takes effect only when the configuration on the local
device is consistent with that on the authentication server. Otherwise, the previous configuration takes
effect.

Configuring a MAC Address-Based VLAN

MAC-based VLANs are available only on hybrid ports.
Follow these steps to configure a MAC-based VLAN:
To do...
Enter system view
Associate MAC addresses
with a VLAN
Enter
Ethernet
Enter
interface view
Ethernet
interface
view or
Enter port
port group
group view
view
Configure the link type of
the port(s) as hybrid
Configure the current
hybrid port(s) to permit
packets of specific
MAC-based VLANs to pass
through
Enable MAC-based VLAN
Configure VLAN matching
precedence
Use the command...
system-view
mac-vlan mac-address
mac-address [ mask mac-mask ]
vlan vlan-id [ priority priority ]
interface interface-type
interface-number
port-group manual
port-group-name
port link-type hybrid
port hybrid vlan vlan-id-list
{ tagged | untagged }
mac-vlan enable
vlan precedence { mac-vlan |
ip-subnet-vlan }
1-11
Remarks
—
Required
Support for the mask keyword
in this command depends on
the device model.
Use either command.
In Ethernet interface view, the
subsequent configurations
apply only to the current port;
in port group view, the
subsequent configurations
apply to all ports in the port
group.
Required
Required
By default, a hybrid port only
permits the packets of VLAN 1
to pass through.
Required
Disabled by default
Optional
By default, VLANs are
preferentially matched based
on MAC addresses.