H3C Technologies H3C S5560 Series Switches - Manual (Page 164)

130
2. Assigns the port that connects the user to the MAC-based VLAN.
When the user goes offline, the device automatically deletes the MAC-to-VLAN entry and removes the
port from the MAC-based VLAN. For more information about 802.1X and MAC authentication, see
Security Configuration Guide.
Configuration restrictions and guidelines
When you configure MAC-based VLANs, follow these restrictions and guideline:
• Do not configure a VLAN as both a super VLAN and a MAC-based VLAN.
• H3C recommends not using dynamic MAC-based VLAN assignment together with the MAC
learning limit or disabling MAC address learning.
When dynamic MAC-based VLAN assignment is enabled on a port, packets received on the port
are delivered to the CPU. Processing to these packets has the highest priority. The configuration of
MAC learning limit and disabling of MAC address learning cannot take effect.
• Do not use dynamic MAC-based VLAN assignment together with 802.1X or MAC authentication.
• For successful dynamic MAC-based VLAN assignment, use static VLANs when you create
MAC-to-VLAN entries.
• The MAC-based VLAN feature is mainly configured on downlink ports of user access devices. Do
not enable this function with link aggregation.
• H3C recommends not using dynamic MAC-based VLAN assignment together with MSTP. In MSTP
mode, if a port is blocked in the MSTI of the target VLAN, the port drops the received packets
instead of delivering them to the CPU. As a result, the receiving port will not be dynamically
assigned to the VLAN.
• H3C recommends not using dynamic MAC-based VLAN assignment together with PVST. In PVST
mode, if the target VLAN is not permitted on a port, the port is placed in blocked state. The received
packets are dropped instead of being delivered to the CPU. As a result, the receiving port will not
be dynamically assigned to the VLAN.
• H3C recommends not configuring both dynamic MAC-based VLAN assignment and automatic
voice VLAN assignment mode on a port. If you have to configure both of them on a port, configure
dynamic MAC-based VLAN assignment first. If you configure them in a reverse order, conflict will
occur. When you remove one of the configurations, the operation of the other is affected.
Configuring static MAC-based VLAN assignment
Step Command Remarks
1. Enter system view. system-view N/A
2. Create a MAC-to-VLAN
entry.
mac-vlan mac-address mac-address
[ mask mac-mask ] vlan vlan-id [ dot1q
priority ]
N/A
3. Enter Layer 2 Ethernet
interface view. interface interface-type
interface-number
N/A
4. Configure the link type of
the port as hybrid.
port link-type hybrid
By default, all ports are access
ports.