6-11
The device associates MAC addresses with VLANs dynamically based on the information provided by
the authentication server. If a user goes offline, the corresponding MAC address-to-VLAN association
is removed automatically. Automatic configuration requires MAC address-to–VLAN mapping be
configured on the authentication server. For detailed information, refer to 802.1X Configuration in the
Security Volume.
The two configuration approaches can be used at the same time, that is, you can configure a MAC
address-to-VLAN entry on both the local device and the authentication server at the same time. Note
that the MAC address-to-VLAN entry configuration takes effect only when the configuration on the
local device is consistent with that on the authentication server. Otherwise, the previous configuration
takes effect.
Configuring a MAC Address-Based VLAN
MAC-based VLANs are available only on hybrid ports.
Follow these steps to configure a MAC-based VLAN:
To do... Use the command... Remarks
Enter system view system-view —
Associate MAC addresses
with a VLAN
mac-vlan mac-address
mac-address vlan vlan-id [ priority
priority ]
Required
Enter
Ethernet
interface view
interface interface-type
interface-number
Enter
Ethernet
interface
view or
port group
view
Enter port
group view
port-group manual
port-group-name
Use either command.
In Ethernet interface view, the
subsequent configurations
apply only to the current port;
in port group view, the
subsequent configurations
apply to all ports in the port
group.
Configure the link type of
the port(s) as hybrid
port link-type hybrid Required
Configure the current
hybrid port(s) to permit
packets of specific
MAC-based VLANs to
pass through
port hybrid vlan vlan-id-list
{ tagged | untagged }
Required
By default, a hybrid port only
permits the packets of VLAN 1
to pass through.
Enable MAC-based VLAN mac-vlan enable
Required
Disabled by default
Configure VLAN matching
precedence
vlan precedence { mac-vlan |
ip-subnet-vlan }
Optional
By default, VLANs are
preferentially matched based
on MAC addresses.
To Next Page
Loading...
