128
Step Command
Remarks
2.
Enter Layer 2 Ethernet
interface view.
interface
interface-type
interface-number
N/A
3.
Configure the link type of the
ports as hybrid.
port link-type
hybrid
By default, all ports are access
ports.
4.
Configure the hybrid port to
forward packets from the
MAC-based VLANs.
port hybrid
vlan
vlan-id-list
{
tagged
|
untagged
}
By default, a hybrid port is an
untagged member of the VLAN
to which the port belongs when
its link type is
access
.
5.
Enable the MAC-based
VLAN feature.
mac-vlan enable
By default, MAC-based VLAN is
disabled.
6.
Configure 802.1X or MAC
authentication.
For more information, see
Security
Command Reference
.
N/A
Configuring IP subnet-based VLANs
In this method, packets are assigned to VLANs based on their source IP addresses and subnet
masks. A port configured with IP subnet-based VLANs assigns a received untagged packet to a
VLAN based on the source address of the packet.
Use this feature when packets from an IP subnet or IP address must be transmitted in a VLAN.
This feature is available only on hybrid ports, and it processes only untagged packets.
An IP subnet-based VLAN has one or multiple subnets to match inbound packets. Each subnet has
a unique index in the IP subnet-based VLAN. All subnets in an IP subnet-based VLAN have the
same VLAN ID.
To configure a IP subnet-based VLAN:
Task Command
Remarks
1.
Enter system view.
system-view
N/A
2.
Enter VLAN view.
vlan
vlan-id
N/A
3.
Associate an IP
subnet or IP
address with the
VLAN.
ip-subnet-vlan
[
ip-subnet-index
]
ip
ip-address
[
mask
]
By default, a VLAN is not associated
with any IP subnets or IP addresses.
A multicast subnet or a multicast
address cannot be associated with a
VLAN.
4.
Return to system
view.
quit
N/A
5.
Enter interface view.
•
Enter Layer 2 Ethernet interface
view:
interface interface-type
interface-number
•
Enter Layer 2 aggregate interface
view:
interface bridge-aggregation
interface-number
•
The configurations made in Layer
2 Ethernet interface view apply
only to the port.
•
The configurations made in Layer
2 aggregate interface view apply
to the aggregate interface and its
aggregation member ports. If the
system fails to apply the
