14
MAC-based VLAN on the router, you must configure the MAC address-to-VLAN entries on the access
authentication server.
When a user passes authentication of the access authentication server, the router obtains VLAN
information from the server, generates a MAC address-to-VLAN entry by using the source MAC address
of the user packet and the VLAN information, and assigns the port to the MAC-based VLAN. When the
user goes offline, the router automatically deletes the MAC address-to-VLAN entry, and removes the port
from the MAC-based VLAN.
NOTE:
For more information about access authentication, see
Security Configuration Guide.
Configuring a MAC-based VLAN
NOTE:
•
The router supports MAC-based VLAN only when its system working mode is SPC.
•
MAC-based VLANs are available only on hybrid ports.
•
Because MAC-based dynamic port assignment is mainly configured on the downlink ports of user
access devices, do not enable this function together with link aggregation.
To configure static MAC-based VLAN assignment:
Step Command
Remarks
1.
Enter system view.
system-view
N/A
2.
Associate MAC addresses with a
VLAN.
mac-vlan mac-address
mac-address
vlan
vlan-id
[
priority
priority
]
N/A
3.
Enter Ethernet interface view or
port group view.
•
Enter Ethernet interface view
:
interface
interface-type
interface-number
•
Enter port group view
:
port-group manual
port-group-name
Use either command.
4.
Configure the link type of the
port(s) as hybrid.
port link-type
hybrid
N/A
5.
Configure the current hybrid
port(s) to permit packets of
specific MAC-based VLANs to
pass through.
port hybrid
vlan
vlan-id-list
{
tagged
|
untagged
}
By default, a hybrid port only
permits the packets of VLAN 1
to pass through.
6.
Enable the MAC-based VLAN
feature.
mac-vlan enable
By default, the MAC-based
VLAN feature is disabled.
To configure dynamic MAC-based VLAN:
Step Command
Remarks
1.
Enter system view.
system-view
N/A