Table of Contents
Advertisement
17 VLANs
Figure 17-10 Switches connected by MAC ports
17.7.3 Linkage with the Layer 2 authentication functionality
(1) Dynamically registering MAC addresses in a MAC VLAN
MAC VLANs can link with the Layer 2 authentication functionality to dynamically registered
MAC addresses with a VLAN. The following are types of the Layer 2 authentication
functionality that can be linked:
IEEE 802.1X: port-based authentication (dynamic) and VLAN-based authentication
(dynamic)
Web authentication: dynamic VLAN mode and legacy mode
MAC-based authentication: dynamic VLAN mode and legacy mode
When the same MAC address is set for the configuration and for Layer 2 authentication, the
configuration MAC address is registered in the MAC VLAN.
If you want a device that supports untagged frames, such as a printer or server, to be
accommodated in the specified VLAN on a MAC port without using Layer 2 authentication,
use the
mac-address
device in a MAC VLAN.
If IEEE 802.1X port-based authentication (dynamic) or dynamic VLAN mode for Web
authentication or MAC-based authentication is used, use the
configuration command to register the MAC address of the target device also in the MAC
address table.
On a MAC port, tagged frames can be forwarded on a VLAN for which the
dot1q vlan
the Layer 2 authentication functionality, see 17.7.4 Optional functionality of MAC ports.
For details about Layer 2 authentication, see 5 Overview of Layer 2 Authentication in the
Configuration Guide Vol. 2 and the description of each authentication method.
272
configuration command to register the MAC address of the target
configuration command has been set. For details about this functionality and
mac-address-table static
switchport mac
Advertisement
Table of Contents
