华为交换机：基于mac地址划分VLAN

华为交换机：基于mac地址划分VLAN
http://www.zh-cjh.com/luyoujiaohuan/2158.html

sw1_2022.05.09.00时20分02秒.txt

（1）拓扑图

（2）配置

sysname sw1
#
vlan batch 2 5 10 12

dhcp enable
#
vlan 2
 mac-vlan mac-address 5489-984c-0493 priority 0
 mac-vlan mac-address 5489-98b6-0232 priority 0
vlan 10
 mac-vlan mac-address 5489-98b8-7070 priority 0
 mac-vlan mac-address 5489-98e8-0442 priority 0
#
interface Vlanif1
 ip address 192.168.0.254 255.255.255.0
 dhcp select interface
 dhcp server excluded-ip-address 192.168.0.200 192.168.0.253
 dhcp server lease unlimited
 dhcp server dns-list 223.5.5.5 223.6.6.6
#
interface Vlanif2
 ip address 192.168.2.254 255.255.255.0
#
interface Vlanif5
 ip address 192.168.5.1 255.255.255.0
#
interface Vlanif10
 ip address 192.168.1.254 255.255.255.0
#                                         
interface Vlanif12
 ip address 192.168.12.254 255.255.255.0
 dhcp select interface
 dhcp server lease day 0 hour 0 minute 1
 dhcp server dns-list 223.5.5.5 223.6.6.6
#
interface GigabitEthernet0/0/1
 port hybrid untagged vlan 2 10
 mac-vlan enable
#
interface GigabitEthernet0/0/2
 port hybrid untagged vlan 2 10
 mac-vlan enable
#
interface GigabitEthernet0/0/3
 port hybrid untagged vlan 2 10
 mac-vlan enable
#
interface GigabitEthernet0/0/4
 port hybrid untagged vlan 2 10
 mac-vlan enable
#                                         
interface GigabitEthernet0/0/5
 port link-type access
 port default vlan 5
#
interface GigabitEthernet0/0/10
 port hybrid untagged vlan 2 10
 mac-vlan enable
#
interface GigabitEthernet0/0/11
#
interface GigabitEthernet0/0/12
 port hybrid pvid vlan 12
 port hybrid untagged vlan 2 10 12
 mac-vlan enable
#

（3）结果

vlan 2
 mac-vlan mac-address 5489-984c-0493

1、mac地址为5489-984c-0493不管接在哪一个接口，所属的vlan都是2，其他绑定的mac地址同理。

2、接在g0/0/12接口的PC可以自动获取到vlan12的ip地址。

3、接口起用 mac-vlan enable后，如果vlan上不绑定设备的mac地址，则设备通讯不成功。

[sw1]vlan 2
[sw1-vlan2]dis this
#
vlan 2
 mac-vlan mac-address 5489-984c-0493 priority 0
 mac-vlan mac-address 5489-98b6-0232 priority 0
#
return
[sw1-vlan2]undo mac-vlan mac-address 5489-98b6-0232
[sw1-vlan2]

4、电脑接到g0/0/1接口，手动配置的是vlan2的ip或者手动配置的是vlan10的ip，都是可以正常上网的，如果自动获取，则获取的是vlan1的ip, 因为默认的pvid就是1。

interface GigabitEthernet0/0/1
 port hybrid untagged vlan 2 10
 mac-vlan enable
#
vlan 2
 mac-vlan mac-address 5489-984c-0493
vlan 10
 mac-vlan mac-address 5489-98b8-7070

5、电脑接到g0/0/1接口，手动配置的是vlan2的ip或者手动配置的是vlan10的ip，都是可以正常上网的，如果自动获取，则获取的是vlan12的ip, 因为pvid已经修改成12。

interface GigabitEthernet0/0/12
 port hybrid pvid vlan 12
 port hybrid untagged vlan 2 10 12
 mac-vlan enable
#

[sw1]display mac-vlan vlan 10
---------------------------------------------------
MAC Address     MASK            VLAN    Priority   
---------------------------------------------------
5489-98b8-7070  ffff-ffff-ffff  10      0          
Total MAC VLAN address count: 1
[sw1]