HP 5500 Ei 5500 Si Switch Series Configuration Guide

 130 
Step Command Remarks 
1.  Enter system view. 
system-view  N/A 
2.  Associate a specific MAC 
address with a VLAN.  mac-vlan mac-address
 
mac-address  [ mask 
mac-mask  ] vlan vlan-id 
[  priority  priority ]  The 
mask  keyword is available on only the 
5500 EI Switch Series.  
3.   Enter interface view or 
port group view. 
• Enter Layer 2 Ethernet 
interface view: 
interface interface-type 
interface-number 
• Enter port group view: 
port-group manual 
port-group-name  Use either command. 
•...

 131 
Step Command Remarks 
6.  Enable dynamic 
MAC-based VLAN 
assignment.  mac-vlan trigger enable  By default, dynamic MAC-based 
VLAN assignment is disabled. 
When you use the 
mac-vlan trigger 
enable  command to enable dynamic 
MAC-based VLAN assignment, HP 
recommends that you configure the 
vlan precedence mac-vlan  command, 
so that VLANs are assigned based on 
single MAC addresses preferentially. 
When dynamic MAC-based VLAN 
assignment is enabled, HP does not 
recommend configuring the vlan...

 132 
 
MAC-based VLAN configuration example 
Network requirements 
As shown in Figure 42: 
•   G
igabitEthernet 1/0/1 of Device A and Device C are each connected to a meeting room. Laptop 
1 and Laptop 2 are used for meetings and might be used in either of the two meeting rooms. 
•   Different departments own Laptop 1 and Laptop  2. The two departments use VLAN 100 and VLAN 
200, respectively. Each laptop must be able to access only its own department server, no matter 
which meeting room it is used in....

 133 
[DeviceA-vlan100] quit 
[DeviceA] vlan 200 
[DeviceA-vlan200] quit 
# Associate the MAC address of Laptop 1 with VLAN 100, and associate the MAC address of 
Laptop 2 with VLAN 200. 
[DeviceA] mac-vlan mac-address 000d-88f8-4e71 vlan 100 
[DeviceA] mac-vlan mac-address 0014-222c-aa69 vlan 200 
# Configure Laptop 1 and Laptop 2 to access the network through GigabitEthernet 1/0/1. 
Configure GigabitEthernet 1/0/1 as a hybrid port that sends packets of VLANs 100 and 200 
untagged, and enable the...

 134 
2.
 
On Device A and Device C, you can see that VL AN 100 is associated with the MAC address of 
Laptop 1, and VLAN 200 is associated  with the MAC address of Laptop 2.  
[DeviceA] display mac-vlan all 
  The following MAC VLAN addresses exist: 
  S:Static  D:Dynamic 
  MAC ADDR         MASK             VLAN ID   PRIO   STATE 
  -------------------------------------------------------- 
  000d-88f8-4e71   ffff-ffff-ffff   100       0      S 
  0014-222c-aa69   ffff-ffff-ffff   200       0      S...

 135 
Configuration procedure 
To configure a protocol-based VLAN:  
Step Command Remarks 
1.  Enter system view. 
system-view  N/A 
2.  Enter VLAN view. 
vlan vlan-id   If the specified VLAN does not exist, this 
command creates the VLAN first. 
3.
  Create a protocol 
template for the 
VLAN.  protocol-vlan
 [ protocol-index  ] { at 
|  ipv4  | ipv6  | ipx {  ethernetii  | llc  
|  raw  |  snap } | mode  { ethernetii 
etype  etype-id  | llc  { dsap  dsap-id 
[ ssap  ssap-id  ] |  ssap  ssap-id  } |...

 136 
Figure 43 Network diagram 
 
 
Configuration consideration 
Create VLANs 100 and 200. Associate VLAN 100 with IPv4, and associate VLAN 200 with IPv6. 
Configure protocol-based VLANs to isolate IPv4 traffic and IPv6 traffic at Layer 2. 
Configuration procedure 
1. Configure Device: 
# Create VLAN 100, and assign port GigabitEthernet 1/0/11 to VLAN 100. 
 system-view 
[Device] vlan 100 
[Device-vlan100] description protocol VLAN for IPv4 
[Device-vlan100] port gigabitethernet 1/0/11 
[Device-vlan100]...

 137 
[Device-GigabitEthernet1/0/1] port hybrid vlan 100 200 untagged 
 Please wait... Done. 
# Associate port GigabitEthernet 1/0/1 with the IPv4 protocol template of VLAN 100 and the 
IPv6 protocol template of VLAN 200. 
[Device-GigabitEthernet1/0/1] port hybrid protocol-vlan vlan 100 1 
[Device-GigabitEthernet1/0/1] port hybrid protocol-vlan vlan 200 1 
[Device-GigabitEthernet1/0/1] quit 
# Configure GigabitEthernet 1/0/2 as a hybrid port that forwards packets of VLANs 100 and 
200 untagged, and...

 138 
     200          1               ipv6 
Configuration guidelines 
Protocol-based VLAN configuration applies only to hybrid ports.  
Configuring IP subnet-based VLANs 
In this approach, packets are assigned to VLANs based on their source IP addresses and subnet masks. 
A port configured with IP subnet-based VLANs assigns a received untagged packet to a VLAN based on 
the source address of the packet.  
This feature is used to assign packets from the specified IP subnet or IP address to a specific...

 139 
Step Command Remarks 
7.  Configure the hybrid 
ports to permit the 
specified IP 
subnet-based VLANs 
to pass through.  port hybrid
 vlan  vlan-id-list 
{  tagged  | untagged  }  By default, a hybrid port allows only 
packets from VLAN 1 to pass through 
untagged.  
8.
  Associate the hybrid 
ports with the specified 
IP subnet-based VLAN.  port hybrid ip-subnet-vlan
 vlan  
vlan-id    Not configured by default. 
 
IP subnet-based VLAN configuration example 
Network requirements 
As shown in...