110To do... Use the command... RemarksDisable the default VLAN ofthe port from forwardingsource-unknown packets thatdo not match any MACaddress-to-VLAN mappingport pvid disableOptionalBy default, source MAC unknownpackets are forwarded in the defaultVLAN of the incoming port if they donot match any MAC address-to-VLANmapping.Configuring dynamic MAC-based VLANNOTE:After enabling MAC-based VLAN on the switch, you must configure related authentication settings on theaccess authentication server. For more information about access authentication, see theSecurityConfiguration Guide.Follow these steps to configure dynamic MAC-based VLAN:To do... Use the command... RemarksEnter system view system-view —Enter Layer2 Ethernetinterfaceview or portgroup viewEnter Layer 2Ethernetinterface viewinterface interface-typeinterface-numberUse either command.• The configuration made in Layer 2Ethernet interface view appliesonly to the current port.• The configuration made in portgroup view applies to all ports inthe port group.Enter portgroup view port-group manual port-group-nameConfigure the link type of theport(s) as hybrid port link-type hybrid RequiredEnable MAC-based VLAN mac-vlan enable RequiredDisabled by defaultMAC-based VLAN configuration exampleNetwork requirements• As shown in Figure 33, GigabitEthernet 1/0/1 of Device A and Device C are each connected toa meeting room. Laptop 1 and Laptop 2 are used for meeting and may be used in any of the twomeeting rooms.• Laptop 1 and Laptop 2 are owned by different departments. The two departments use VLAN 100and VLAN 200 respectively. Each laptop can access only its own department server no matterwhich meeting room it is used in.• The MAC address of Laptop 1 is 000d-88f8-4e71, and that of Laptop 2 is 0014-222c-aa69.
