3Com 4510G, Руководство по настройке

Страница: 137 / 1166

6-11
The device associates MAC addresses with VLANs dynamically based on the information provided by
the authentication server. If a user goes offline, the corresponding MAC address-to-VLAN association
is removed automatically. Automatic configuration requires MAC address-to–VLAN mapping be
configured on the authentication server. For detailed information, refer to
802.1X Configuration
in the
Security Volume
.
The two configuration approaches can be used at the same time, that is, you can configure a MAC
address-to-VLAN entry on both the local device and the authentication server at the same time. Note
that the MAC address-to-VLAN entry configuration takes effect only when the configuration on the
local device is consistent with that on the authentication server. Otherwise, the previous configuration
takes effect.
Configuring a MAC Address-Based VLAN
MAC-based VLANs are available only on hybrid ports.
Follow these steps to configure a MAC-based VLAN:
To do... Use the command... Remarks
Enter system view
system-view
—
Associate MAC addresses
with a VLAN
mac-vlan mac-address
mac-address vlan vlan-id
[
priority
priority
]
Required
Enter
Ethernet
interface view
interface interface-type
interface-number
Enter
Ethernet
interface
view or
port group
view
Enter port
group view
port-group manual
port-group-name
Use either command.
In Ethernet interface view, the
subsequent configurations
apply only to the current port;
in port group view, the
subsequent configurations
apply to all ports in the port
group.
Configure the link type of
the port(s) as hybrid
port link-type hybrid
Required
Configure the current
hybrid port(s) to permit
packets of specific
MAC-based VLANs to
pass through
port hybrid vlan vlan-id-list
{
tagged
|
untagged
}
Required
By default, a hybrid port only
permits the packets of VLAN 1
to pass through.
Enable MAC-based VLAN
mac-vlan enable
Required
Disabled by default
Configure VLAN matching
precedence
vlan precedence
{
mac-vlan
|
ip-subnet-vlan
}
Optional
By default, VLANs are
preferentially matched based
on MAC addresses.