H3C S6850 Series, Configuration Manual

Page: 145 / 394

3
Actions Access Trunk Hybrid
the PVID.
•
Drops the frame if
its VLAN ID is
different from the
PVID.
In the outbound
direction Removes the VLAN tag
and sends the frame.
•
Removes the tag
and sends the frame
if the frame carries
the PVID tag and the
port belongs to the
PVID.
•
Sends the frame
without removing the
tag if its VLAN is
carried on the port
but is different from
the PVID.
Sends the frame if its VLAN is
permitted on the port. The
tagging status of the frame
depends on the
port
hybrid vlan
command
configuration.
MAC-based VLANs
The MAC-based VLAN feature assigns hosts to a VLAN based on their MAC addresses. This feature
is also called user-based VLAN because VLAN configuration remains the same regardless of a
user's physical location.
Static MAC-based VLAN assignment
Use static MAC-based VLAN assignment in networks that have a small number of VLAN users. To
configure static MAC-based VLAN assignment on a port, perform the following tasks:
1. Create MAC-to-VLAN entries.
2. Enable the MAC-based VLAN feature on the port.
3. Assign the port to the MAC-based VLAN.
A port configured with static MAC-based VLAN assignment processes a received frame as follows
before sending the frame out:
•
For an untagged frame, the port determines its VLAN ID in the following workflow:
a. The port first performs a fuzzy match as follows:
−
Searches for the MAC-to-VLAN entries whose masks are not all Fs.
−
Performs a logical AND operation on the source MAC address and each of these
masks.
If an AND operation result matches the MAC address in a MAC-to-VLAN entry, the port
tags the frame with the VLAN ID specific to this entry.
b. If the fuzzy match fails, the port performs an exact match. It searches for MAC-to-VLAN
entries whose masks are all Fs. If the source MAC address of the frame exactly matches the
MAC address of a MAC-to-VLAN entry, the port tags the frame with the VLAN ID specific to
this entry.
c. If no matching VLAN ID is found, the port determines the VLAN for the packet by using the
following matching order:
−
IP subnet-based VLAN.
−
Protocol-based VLAN.
−
Port-based VLAN.
When a match is found, the port tags the packet with the matching VLAN ID.