H3C Technologies H3C WX5500E Series Access Controllers - Manual (Page 132)

121
Dynamic MAC-based VLAN assignment
When you cannot determine the target MAC-based VLANs of a port, you can use dynamic MAC-based
VLAN assignment on the port. To do that, you can create a MAC address-to-VLAN map containing
multiple MAC address-to-VLAN entries, and enable the MAC-based VLAN feature and dynamic
MAC-based VLAN assignment on the port.
Dynamic MAC-based VLAN assignment uses the following workflows.
1. When the port receives a frame, it first determines whether the frame is tagged.
{
If yes, the port reports the source MAC address of the frame.
{
If not, the port selects a VLAN for the frame in the order of MAC-based VLAN, IP subnet-based
VLAN, protocol-based VLAN, and port-based VLAN, tags the untagged frame with the selected
VLAN tag, and obtains the tag. Then, the port reports the source MAC address of the frame.
2. After reporting the source MAC address of the frame, the port looks up the source MAC address
in the MAC-to-VLAN map, and processes the frame as follows:
{
If the source MAC address of the frame exactly matches a MAC address-to-VLAN entry
configured on the port, the port checks whether the VLAN ID of the frame is the same as the
VLAN in the MAC address-to-VLAN entry.
If yes, the port dynamically joins the VLAN and forwards the frame.
If not, the port drops the frame.
{
If the source MAC address of the frame does not exactly match any MAC address-to-VLAN entry,
the port processes the frame depending on whether the VLAN ID of the frame is the PVID.
If yes, the port determines whether it allows PVID: if yes, the port forwards the frame within the
PVID; if not, the port drops the frame.
If not, the port assigns a VLAN to the frame by using other criteria, such as IP subnet or protocol,
and forwards the frame. If no VLAN is available, the port drops the frame.