115
Configuration procedure
To configure static MAC-based VLAN assignment:
Step Command Remarks
1. Enter system view.
system-view
N/A
2. Associate a specific
MAC address with a
VLAN.
mac-vlan mac-address
mac-address
vlan
vlan-id
[
priority
priority ]
N/A
3. Enter interface view or
port group view.
• Enter Layer 2 Ethernet
interface view:
interface
interface-type
interface-number
• Enter port group view:
port-group manual
port-group-name
Use either command.
• The configuration made in Ethernet
interface view applies only to the port.
• The configuration made in port group
view applies to all ports in the port
group.
4. Configure the link type of
the ports as hybrid.
port link-type
hybrid
By default, all ports are access ports.
5. Configure the hybrid
ports to permit packets
from specific
MAC-based VLANs to
pass through.
port hybrid
vlan
vlan-list
{
tagged
|
untagged
}
By default, a hybrid port only permits the
packets from VLAN 1 to pass through.
6. Enable the MAC-based
VLAN feature.
mac-vlan enable
Disabled by default.
To configure dynamic MAC-based VLAN:
Step Command Remarks
1. Enter system view.
system-view
N/A
2. Enter interface view or port
group view.
• Enter Layer 2
Ethernet interface
view:
interface
interface-type
interface-number
• Enter port group
view:
port-group manual
port-group-name
Use either command.
• The configuration made in Ethernet
interface view applies only to the
port.
• The configuration made in port
group view applies to all ports in the
port group.
3. Configure the link type of the
ports as hybrid.
port link-type
hybrid
By default, all ports are access ports.
4. Configure the hybrid ports to
permit packets from specific
MAC-based VLANs to pass
through.
port hybrid
vlan
vlan-list
{
tagged
|
untagged
}
By default, a hybrid port only permits the
packets of VLAN 1 to pass through.
5. Enable the MAC-based
VLAN feature.
mac-vlan enable
Disabled by default.
6. Configure
802.1X/MAC/portal
authentication or any
combination.
For more information, see
Security Command
Reference.
N/A