Configure Media Access Control (MAC)-Based Virtual Local Area Network (VLAN) Groups on a Switch

Available Languages

Download Options

  • PDF     (176.3 KB)
    View with Adobe Reader on a variety of devices
  • ePub     (261.8 KB)
    View in various apps on iPhone, iPad, Android, Sony Reader, or Windows Phone
  • Mobi (Kindle)     (265.1 KB)
    View on Kindle device or Kindle app on multiple devices
Updated:December 13, 2018
Document ID:SMB3071

Bias-Free Language

The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.

kmgmt-2125-identify-disable-smartports

Objective

A Virtual Local Area Network (VLAN) allows you to logically segment a Local Area Network (LAN) into different broadcast domains. In scenarios where sensitive data may be broadcast on a network, VLANs can be created to enhance security by designating a broadcast to a specific VLAN. Only users that belong to a VLAN are able to access and manipulate the data on that VLAN. VLANs can also be used to enhance performance by reducing the need to send broadcasts and multicasts to unnecessary destinations.

Networking devices on which multiple protocols are running cannot be grouped to a common VLAN. Non-standard devices are used to pass traffic between different VLANs in order to include the devices participating in a specific protocol. For this reason, the user cannot take advantage of the many features of VLAN.

VLAN groups are used to load balance the traffic on a Layer 2 network. The packets are distributed with respect to different classifications and are assigned to VLANs. Many different classifications exist, and if more than one classification scheme is defined, the packets are assigned to the VLAN in this order:

  • Tag — The VLAN number is recognized from the tag.
  • MAC-Based VLAN — The VLAN is recognized from the source Media Access Control (MAC)-to-VLAN mapping of the ingress interface.
  • Subnet-Based VLAN — The VLAN is recognized from the source Subnet-to-VLAN mapping of the ingress interface. To learn how to configure this feature, click here for instructions.
  • Protocol-Based VLAN — The VLAN is recognized from the Ethernet type Protocol-to-VLAN mapping of the ingress interface. 
  • PVID — VLAN is recognized from the port default VLAN ID.

The MAC-based VLAN classification enable packets to be classified according to their source MAC address. You can then define MAC-to-VLAN mapping per interface. You can also define several MAC-based VLAN groups, which each group containing different MAC addresses. These MAC-based groups can be assigned to specific ports or LAGs. MAC-based VLAN groups cannot contain overlapping ranges of MAC addresses on the same port.

This article provides instructions on how to configure MAC-Based groups on a switch.

Applicable Devices

  • Sx350 Series
  • SG350X Series
  • Sx500 Series
  • Sx550X Series

Software Version

  • 1.4.7.05 – Sx500 Series
  • 2.2.5.68 – Sx350 Series, Sx350X Series, Sx550X Series

Configure MAC-Based VLAN Groups on the Switch

Add MAC-Based VLAN Group

Step 1. Log in to the web-based utility and chooseAdvanced from the Display Mode drop-down list.

Note: If you have an Sx500 Series switch, skip to Step 2.

Step 2. Choose VLAN Management >VLAN Groups > MAC-Based Groups.

The available menu options may vary depending on the device model.

Step 3. In the MAC-Based Group Table, click Add.

Step 4. Enter the MAC address to be assigned to a VLAN group. This MAC address cannot be assigned to any other VLAN group.

In this example, 0a:1b:2c:4d:5e:6f is used.

Step 5. Click the radio button that corresponds to the method you want to use to define the Prefix Mask. The prefix mask looks at a certain number of bits and then assigns the MAC address to a VLAN group.

The options are:

  • Host — The entire MAC address is looked at and put into a group. You can only group MAC addresses one at a time when you use host. If this option is chosen, skip to Step 7.
  • Length — Only a section of the MAC address is looked at (from left to right) and then placed in a group. The lower the length number, the fewer bits are looked at. This means you can assign a large number of MAC addresses to a VLAN group at once. If this option is chosen, enter the length of the prefix mask in the Length field.

In this example, Length is chosen and 12 is used.

Step 6. In the Group ID field, enter an ID to identify the MAC-Based VLAN group.

In this example, 5 is used.

Step 7. Click Apply then click Close.

Step 8. (Optional) Click Save to save settings to the startup configuration file.

You should now have added a MAC-Based VLAN group on your switch.

Delete MAC-Based VLAN Group

Step 1. Choose VLAN Groups > MAC-Based Groups.

Step 2. In the MAC-Based Group Table, check the box next to the MAC-Based VLAN group you would like to delete.

Step 3. Click the Delete button to delete the MAC-Based VLAN group.

Step 4. (Optional) Click Save to save settings to the startup configuration file.

The MAC-Based VLAN group should now be deleted from your switch.

You should now have configured MAC-Based VLAN groups on your switch. To learn how to map MAC-Based groups to VLAN, click here for instructions.

Revision History

Revision Publish Date Comments
1.0
13-Dec-2018
Initial Release

Was this Document Helpful?

FeedbackFeedback

Contact Cisco