No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search


To have a better experience, please upgrade your IE browser.


Configuration Guide - Ethernet Switching

CloudEngine 8800, 7800, 6800, and 5800 V200R003C00

This document describes the configuration of Ethernet services, including configuring MAC address table, link aggregation, VLANs, MUX VLAN, Voice VLAN, VLAN mapping, QinQ, GVRP, VCMP, STP/RSTP/MSTP, VBST, SEP, RRPP, ERPS, LBDT, and Layer 2 protocol transparent transmission.
Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
Dividing a LAN into VLANs Based on MAC Addresses

Dividing a LAN into VLANs Based on MAC Addresses



The switch enabled with MAC address-based VLAN assignment cannot process protocol packets sent to the CPU, and it is recommended that MAC address-based VLAN assignment be used in Layer 2 transparent transmission scenarios.

MAC address-based VLAN assignment is used if user locations do not need to be concerned. This improves security and flexibility for terminal users.

VLANs configured based on MAC addresses process only untagged frames, and treat tagged frames in the same manner as VLANs configured based on ports.

After receiving an untagged frame, a port searches for a MAC-VLAN mapping based on the source MAC address in the frame.
  • If a mapping is found, the port forwards the frame based on the VLAN ID and priority value in the mapping.

  • If no matching mapping is found, the port matches the frame with other matching rules.


  1. Run system-view

    The system view is displayed.

  2. (Optional) Run vlan assign global { vlan-id1 [ to vlan-id2 ] } &<1-5>

    VLANs that can be globally assigned are specified.


    Only the CE8800 series switches, CE7800 series switches, CE6875EI, CE6870EI, CE6860EI, CE6850U-HI, CE6851HI, CE6850HI, CE6856HI, and CE6855HI support this configuration.

    After VLANs are assigned, the VLANs created using the vlan vlan-id command must be within the assignable VLAN range.

  3. (Optional) Run vlan reserved vlan-id

    A reserved VLAN is configured.

    By default, the reserved VLAN ID ranges from 4064 to 4094. After vlan-id is specified, the VLAN specified by vlan-id to the VLAN specified by vlan-id plus 30 are configured as reserved VLANs.

    CE6880EI does not support this step.

  4. Run vlan vlan-id

    A VLAN is created, and the VLAN view is displayed. If the specified VLAN has been created, the VLAN view is directly displayed.

    The VLAN ID ranges from 1 to 4094 (excluding reserved VLANs). If VLANs need to be created in batches, run the vlan batch { vlan-id1 [ to vlan-id2 ] } &<1-10> command to create VLANs in batches, and then run the vlan vlan-id command to enter the view of a specified VLAN.


    If a device is configured with multiple VLANs, configuring names for these VLANs is recommended:

    Run the name vlan-name command in the VLAN view. After a VLAN name is configured, you can run the vlan vlan-name vlan-name command in the system view to enter the corresponding VLAN view.

  5. Run mac-vlan mac-address mac-address [ priority priority ]

    A MAC address is mapped to the VLAN.

    • The mac-address value is in H-H-H format. An H is a hexadecimal number that contains one to four digits, such as 00e0 and fc01. If an H contains less than four digits, 0s are padded ahead. For example, if you specify an H as e0, it is displayed as 00e0. A MAC address cannot be set to all 0s, all Fs or multicast addresses.

    • priority specifies the 802.1p priority relevant to the MAC addresses. The value ranges from 0 to 7. A larger value indicates a higher priority. The default value is 0. After the 802.1p priority is specified, frames with high priorities are first forwarded when traffic is congested. CE6870EI and CE6875EI do not support this parameter.

  6. Run quit

    The system view is displayed.

  7. Configure attributes for Ethernet interfaces.

    1. Run the interface interface-type interface-number command to enter the view of the interface.
    2. Run the port link-type hybrid command to set the link type of the interface to hybrid.

      The interface where MAC address-based VLAN assignment is to be enabled is a hybrid interface.

      By default, the link type is access.

    3. Run the port hybrid untagged vlan { { vlan-id1 [ to vlan-id2 ] } &<1-10> | all } command to configure the hybrid interface to allow frames with a specified VLAN ID to pass through.

  8. Run mac-vlan enable

    MAC address-based VLAN assignment is enabled.

    By default, MAC address-based VLAN assignment is disabled.

    • For CE6870EI and CE6875EI, MAC address-based VLAN assignment cannot be used with port security or MAC address limiting on the same interface.

    • When MAC address-based VLAN assignment is used, the priority of packets with the VLAN ID of 0 cannot be modified.

    • When MAC address-based assignment is configured on the CE6870EI and CE6875EI, running the mac-vlan enable or undo mac-vlan enable command may cause few packets to be discarded. Exercise caution when you run this command.

  9. Run commit

    The configuration is committed.

Updated: 2019-05-08

Document ID: EDOC1100004351

Views: 127324

Downloads: 296

Average rating:
This Document Applies to these Products
Related Documents
Related Version
Previous Next