mac-authentication host-mode multi-vlan

Syntax

mac-authentication host-mode multi-vlan

undo mac-authentication host-mode multi-vlan

View

Layer 2 Ethernet interface view

Default level

2: System level

Parameters

None

Description

Use mac-authentication host-mode multi-vlan to enable MAC authentication multi-VLAN mode on a port.

Use undo mac-authentication host-mode multi-vlan to restore the default.

By default, MAC authentication multi-VLAN mode is disabled on a port. The device forwards packets for an authenticated user on the port only in the VLAN where the user is authenticated. If the user accesses the port through a different VLAN, the device logs off the user and re-authenticates the user in the new VLAN.

The MAC authentication multi-VLAN mode enables a port to forward packets for an authenticated user in up to five VLANs without re-authentication.

Examples

# Enable MAC authentication multi-VLAN mode on Ethernet 1/0/1.

<Sysname> system-view
[Sysname] interface ethernet 1/0/1
[Sysname-Ethernet1/0/1] mac-authentication host-mode multi-vlan