115
Configuration procedure
To configure static MAC-based VLAN assignment:
Step Command
Remarks
1.
Enter system view.
system-view
N/A
2.
Associate a specific
MAC address with a
VLAN.
mac-vlan mac-address
mac-address vlan vlan-id
[
priority priority
]
N/A
3.
Enter interface view or
port group view.
•
Enter Layer 2 Ethernet
interface view:
interface
interface-type
interface-number
•
Enter port group view:
port-group manual
port-group-name
Use either command.
•
The configuration made in Ethernet
interface view applies only to the port.
•
The configuration made in port group
view applies to all ports in the port
group.
4.
Configure the link type of
the ports as hybrid.
port link-type
hybrid
By default, all ports are access ports.
5.
Configure the hybrid
ports to permit packets
from specific
MAC-based VLANs to
pass through.
port hybrid
vlan
vlan-list
{
tagged
|
untagged
}
By default, a hybrid port only permits the
packets from VLAN 1 to pass through.
6.
Enable the MAC-based
VLAN feature.
mac-vlan enable
Disabled by default.
To configure dynamic MAC-based VLAN:
Step Command
Remarks
1.
Enter system view.
system-view
N/A
2.
Enter interface view or port
group view.
•
Enter Layer 2
Ethernet interface
view:
interface
interface-type
interface-number
•
Enter port group
view:
port-group manual
port-group-name
Use either command.
•
The configuration made in Ethernet
interface view applies only to the
port.
•
The configuration made in port
group view applies to all ports in the
port group.
3.
Configure the link type of the
ports as hybrid.
port link-type
hybrid
By default, all ports are access ports.
4.
Configure the hybrid ports to
permit packets from specific
MAC-based VLANs to pass
through.
port hybrid
vlan
vlan-list
{
tagged
|
untagged
}
By default, a hybrid port only permits the
packets of VLAN 1 to pass through.
5.
Enable the MAC-based
VLAN feature.
mac-vlan enable
Disabled by default.
6.
Configure
802.1X/MAC/portal
authentication or any
combination.
For more information, see
Security Command
Reference
.
N/A