HP 5820X Series

117
To do... Use the command... Remarks
8. Disable the default VLAN
of the port from
forwarding source-
unknown packets that do
not match any MAC
address-to-VLAN mapping
port pvid disable
Optional.
By default, source MAC unknown
packets are forwarded in the default
VLAN of the incoming port if they do
not match any MAC address-to-
VLAN mapping.
When you use the mac-vlan trigger enable command to enable dynamic MAC-based VLAN assignment,
HP recommends that you configure the vlan precedence mac-vlan command, so that VLANs are assigned
based on single MAC addresses preferentially. When dynamic MAC-based VLAN assignment is enabled,
HP does not recommend configuring the vlan precedence ip-subnet-vlan command, which will make the
system assign VLANs based on IP subnets, because the configuration does not take effect.
Dynamic MAC-based VLAN assignment works only when an exact match is found, or in other words,
when the source MAC address of an untagged incoming packet matches a MAC address-to-VLAN entry
whose mask is all Fs. In this case, the port adds the source MAC address to its MAC address table, and
automatically joins the matched VLAN. Dynamic MAC-based VLAN assignment does not work when no
match or a fuzzy match (mask of the matched entry is not all Fs) is found.
Configuring dynamic MAC-based VLAN
After enabling MAC-based VLAN on the switch, you must configure related authentication settings on the
access authentication server. For more information about 802.1X authentication, see the Security
Configuration Guide.
To configure dynamic MAC-based VLAN:
To do... Use the command... Remarks
1. Enter system view
system-view —
Enter
Ethernet
interface
view
interface interface-type interface-
number
2. Enter
Ethernet
interface
view or
port group
view
Enter port
group view
port-group manual port-group-name
Use either command.
• The configuration made in
Ethernet interface view applies
only to the current port.
• The configuration made in port
group view applies to all ports in
the port group.
3. Configure the link type of
the ports as hybrid
port link-type hybrid Required.
4. Enable MAC-based VLAN
mac-vlan enable
Required.
Disabled by default.
MAC-based VLAN configuration example
Network requirements
• As shown in Figure 39, GigabitEthernet 1/0/1 of Device A and Device C are each connected to a
meeting room. Laptop 1 and Laptop 2 are used for meeting and may be used in any of the two
meeting rooms.