H3C Technologies H3C S7500E Series Switches - Manual (Page 227)

15-19
MAC-Based VLAN Configuration Example
Network requirements
As shown in Figure 15-6 , GigabitEthernet 2/0/1 of Device A and Device C are each connected to a
meeting room. Laptop 1 and Laptop 2 are used for meeting and may be used in any of the two
meeting rooms.
Laptop 1 and Laptop 2 are owned by different departments. The two departments use VLAN 100
and VLAN 200 respectively. It is required that each laptop can access only its own department
server no matter which meeting room it is used in.
The MAC address of Laptop 1 is 000d-88f8-4e71, and that of Laptop 2 is 0014-222c-aa69.
Figure 15-6 Network diagram for MAC-based VLAN configuration
Device A
Device C
Device B
Server1
IP: 1.1.1.1/24
Server2
IP: 1.1.2.1/24
GE2/0/1 GE2/0/1
Laptop1
IP: 1.1.1.2/24
MAC: 000d-88f8-4e71
Laptop2
IP: 1.1.2.2/24
MAC: 0014-222c-aa69
VLAN 100 VLAN 200
GE2/0/2 GE2/0/2
GE2/0/3 GE2/0/4
GE2/0/14 GE2/0/13
VLAN 100 VLAN 200
Configuration consideration
Create VLANs 100 and 200.
Configure the uplink ports of Device A and Device C as trunk ports, and assign them to VLANs
100 and 200.
Associate the MAC address of Laptop 1 with VLAN 100, and the MAC address of Laptop 2 with
VLAN 200.
Configuration procedure
1) Configuration on Device A
# Create VLANs 100 and 200.
system-view
[DeviceA] vlan 100
[DeviceA-vlan100] quit
[DeviceA] vlan 200
[DeviceA-vlan200] quit
# Associate the MAC address of Laptop 1 with VLAN 100, and the MAC address of Laptop 2 with
VLAN 200.