126
When the user goes offline, the device automatically deletes the MAC-to-VLAN entry and removes
the port from the MAC-based VLAN. For more information about 802.1X and MAC authentication,
see
Security Configuration Guide
.
Configuration restrictions and guidelines
When you configure MAC-based VLANs, follow these restrictions and guideline:
•
Do not configure a VLAN as both a super VLAN and a MAC-based VLAN.
•
As a best practice, do not use dynamic MAC-based VLAN assignment together with the MAC
learning limit or disabling MAC address learning.
When dynamic MAC-based VLAN assignment is enabled on a port, packets received on the
port are delivered to the CPU. Processing to these packets has the highest priority. The
configuration of MAC learning limit and disabling of MAC address learning cannot take effect.
•
Do not use dynamic MAC-based VLAN assignment together with 802.1X or MAC
authentication.
•
For successful dynamic MAC-based VLAN assignment, use static VLANs when you create
MAC-to-VLAN entries.
•
The MAC-based VLAN feature is mainly configured on downlink ports of user access devices.
Do not enable this function with link aggregation.
•
As a best practice, do not use dynamic MAC-based VLAN assignment together with MSTP. In
MSTP mode, if a port is blocked in the MSTI of the target VLAN, the port drops the received
packets instead of delivering them to the CPU. As a result, the receiving port will not be
dynamically assigned to the VLAN.
•
As a best practice, do not use dynamic MAC-based VLAN assignment together with PVST. In
PVST mode, if the target VLAN is not permitted on a port, the port is placed in blocked state.
The received packets are dropped instead of being delivered to the CPU. As a result, the
receiving port will not be dynamically assigned to the VLAN.
•
As a best practice, do not configure both dynamic MAC-based VLAN assignment and automatic
voice VLAN assignment mode on a port. If you have to configure both of them on a port,
configure dynamic MAC-based VLAN assignment first. If you configure them in a reverse order,
conflict will occur. When you remove one of the configurations, the operation of the other is
affected.
Configuring static MAC-based VLAN assignment
Step Command Remarks
1.
Enter system view.
system-view
N/A
2.
Create a MAC-to-VLAN
entry.
mac-vlan mac-address
mac-address
[
mask mac-mask
]
vlan vlan-id
[
dot1q priority
]
N/A
3.
Enter Layer 2 Ethernet
interface view.
interface
interface-type
interface-number
N/A
4.
Configure the link type of
the port as hybrid.
port link-type
hybrid
By default, all ports are access
ports.
5.
Configure the hybrid port
to forward packets from
the MAC-based VLANs.
port hybrid
vlan
vlan-id-list
{
tagged
|
untagged
}
By default, a hybrid port is an
untagged member of the VLAN to
which the port belongs when its
link type is
access
.
6.
Enable the MAC-based
VLAN feature.
mac-vlan enable
By default, this feature is
disabled.
