115
NOTE:
After enabling MAC-based VLAN on the switch, you must configure related authentication settings on
the access authentication server. For more information about access authentication, see the
Security
Configuration Guide
.
Follow these steps to configure dynamic MAC-based VLAN:
Enter
Ethernet
interface
view or
port group
view
Enter Ethernet
interface view
interface interface-type interface-
number
Use either command.
The configuration made in
Ethernet interface view applies
only to the current port.
The configuration made in port
group view applies to all ports in
the port group.
port-group manual port-group-name
Configure the link type of the
port(s) as hybrid
Required
Disabled by default
MAC-based VLAN configuration example
Network requirements
As shown in Figure 36, GigabitEthernet 1/0/1 of Device A and Device C are each connected to a
meeting room. Laptop 1 and Laptop 2 are used for meetings and might be used in either of the two
meeting rooms.
Different departments own Laptop 1 and Laptop 2. The two departments use VLAN 100 and VLAN
200 respectively. Each laptop must be able to access only its own department server, no matter
which meeting room it is used in.
The MAC address of Laptop 1 is 000d-88f8-4e71, and that of Laptop 2 is 0014-222c-aa69.