113Total MAC VLAN address count:2Configuration guidelines1. MAC-based VLAN can be configured only on hybrid ports.2. MAC-based VLAN is typically configured on the downlink ports of access layer devices, andcannot be configured together with the link aggregation function.Protocol-based VLAN configurationIntroduction to protocol-based VLANNOTE:Protocol-based VLAN configuration applies to hybrid ports only.In this approach, inbound packets are assigned to different VLANs based on their protocol types andencapsulation formats. The protocols that can be used for VLAN assignment include IP, IPX, andAppleTalk (AT). The encapsulation formats include Ethernet II, 802.3 raw, 802.2 LLC, and 802.2 SNAP.A protocol type and an encapsulation format comprise a protocol template. You can create multipleprotocol templates for a protocol-based VLAN, and different protocol templates are assigned differentprotocol-index values. A protocol template can be uniquely identified by a protocol-based VLAN ID anda protocol index combined. When you use commands to associate protocol templates with ports, useprotocol-based vlan-id + protocol index to specify the protocol templates. An untagged packet reachinga port associated with protocol templates will be processed using the following workflow:• If the protocol type and encapsulation format carried in the packet matches a protocol template, thepacket will be tagged with the VLAN tag corresponding to the protocol template.• If the packet matches no protocol templates, the packet will be tagged with the default VLAN ID ofthe port.The port processes a tagged packet as it processes tagged packets of a port-based VLAN.• If the port is assigned to the VLAN corresponding to the VLAN tag carried in the packet, it forwardsthe packet.• If not, it drops the packet.This feature is mainly used to assign packets of the specific service type to a specific VLAN.Configuring a protocol-based VLANFollow these steps to configure a protocol-based VLAN:To do… Use the command… RemarksEnter system view system-view —Enter VLAN view vlan vlan-idRequiredIf the specified VLAN does notexist, this command creates theVLAN first.
