129
multiple MAC address-to-VLAN entries, and enable the MAC-based VLAN feature and dynamic
MAC-based VLAN assignment on the port.
Dynamic MAC-based VLAN assignment uses the following workflows.
1.
When the port receives a frame, the port first determines whether the frame is tagged.
•
If yes, the port reports the source MAC address of the frame.
•
If not, the port selects a VLAN for the frame in the order of MAC-based VLAN, IP subnet-based
VLAN, protocol-based VLAN, and port-based VLAN, tags the untagged frame with the selected
VLAN tag, and obtains the tag. Then, the port reports the source MAC address of the frame.
2.
After reporting the source MAC address of the frame, the port looks up the source MAC address
in the MAC-to-VLAN map, and processes the frame as follows:
•
If the source MAC address of the frame exactly matches a MAC address-to-VLAN entry configured
on the port, the port checks whether the VLAN ID of the frame is the same as the VLAN in the
MAC-to-VLAN entry.
a.
If yes, the port dynamically joins the VLAN and forwards the frame.
b.
If not, the port drops the frame.
•
If the source MAC address of the frame does not exactly match a MAC-to-VLAN entry, the port
processes the frame depending on whether the VLAN ID of the frame is the PVID.
c.
If yes, the port determines whether it allows PVID: if yes, the port forwards the frame in the PVID;
if not, the port drops the frame.
d.
If not, the port assigns a VLAN to the frame by using other criteria, such as IP subnet or protocol,
and forwards the frame. If no VLAN is available, the port drops the frame.
Figure 43
Flowchart for processing a frame in dynamic MAC-based VLAN assignment
When you configure dynamic MAC-based VLAN assignment, follow these guidelines:
