18
Examples
# Add MAC address 000f-e201-0101 to VSI vsi1. Specify Tunnel-interface 1 as the outgoing
interface.
<Sysname> system-view
[Sysname] mac-address static 000f-e201-0101 interface tunnel 1 vsi vsi1
# Add MAC address 000f-e201-0102 of Ethernet service instance 1 to VSI vsi1. Specify
GigabitEthernet 1/0/1 as the outgoing interface.
<Sysname> system-view
[Sysname] mac-address static 000f-e201-0102 interface gigabitethernet 1/0/1
service-instance 1 vsi vsi1
Related commands
vxlan tunnel mac-learning disable
mac-based ac
Use mac-based ac to enable MAC-based traffic match mode for dynamic Ethernet service
instances on an interface.
Use
undo mac-based ac to disable MAC-based traffic match mode for dynamic Ethernet service
instances on an interface.
Syntax
mac-based ac
undo mac-based ac
Default
MAC-based traffic match mode is disabled for dynamic Ethernet service instances.
Views
Layer 2 aggregate interface view
Layer 2 Ethernet interface view
Predefined user roles
network-admin
Usage guidelines
The 802.1X or MAC authentication feature can use the authorization VSI, the guest VSI, the
Auth-Fail VSI, and the critical VSI to control the access of users to network resources. When
assigning a user to a VSI, 802.1X or MAC authentication sends the VXLAN feature the VSI
information and the user's access information, including access interface, VLAN, and MAC address.
Then the VXLAN feature creates a dynamic Ethernet service instance for the user and maps it to the
VSI.
A dynamic Ethernet service instance supports MAC-based match mode. This mode matches frames
by VLAN ID and source MAC address. To use MAC-based traffic match mode for dynamic Ethernet
service instances, you must enable MAC authentication or 802.1X authentication that uses
MAC-based access control.
This command takes effect only on dynamic Ethernet service instances. Static Ethernet service
instances created by using the
service-instance command match traffic only by the VLAN IDs
specified by using the
encapsulation command.
You cannot change the traffic match mode when dynamic Ethernet service instances already exist
on an interface.