R3303-HP HSR6800 Routers Layer 2 - LAN Switching Configuration Guide

100
Ste
p
Command Remarks
2. Enter interface view or port
group view.
• Enter interface view:
interface interface-type
interface-number
• Enter port group view:
port-group manual
port-group-name
Use one of the commands.
• The configuration made in
Ethernet interface view applies
only to the port.
• The configuration made in port
group view applies to all ports in
the port group.
3. Configure the link type of the
ports as hybrid.
port link-type hybrid
By default, all ports are access
ports.
4. Configure the hybrid ports to
permit packets from specific
MAC-based VLANs to pass
through.
port hybrid vlan vlan-list { tagged
| untagged }
By default, a hybrid port only
permits the packets of VLAN 1 to
pass through.
5. Enable the MAC-based VLAN
feature.
mac-vlan enable
By default, MAC-based VLAN is
disabled.
6. Configure
802.1X/MAC/portal
authentication or any
combination.
For more information, see
Security Command Reference.
N/A
MAC-based VLAN configuration example
Network requirements
As shown in Figure 38:
• GigabitEthernet 4/0/1 of Router A and Router C are each connected to a meeting room. Laptop
1 and Laptop 2 are used for meetings and might be used in either of the two meeting rooms.
• Different departments own Laptop 1 and Laptop 2. The two departments use VLAN 100 and VLAN
200, respectively.
• The MAC address of Laptop 1 is 000D-88F8-4E71, and that of Laptop 2 is 0014-222C-AA69.
Configure MAC-based VLANs, so that each laptop is able to access only its own department server, no
matter which meeting room it is used in.