Configuration restrictions and guidelines
When you configure MAC-based VLANs, follow these restrictions and guideline:
As a best practice, do not set the MAC learning limit or disable MAC address learning when you enable dynamic MAC-based VLAN assignment.
When dynamic MAC-based VLAN assignment is enabled on a port, packets received on the port are delivered to the CPU. Processing to these packets has the highest priority. The configuration of MAC learning limit and disabling of MAC address learning cannot take effect.
Do not use dynamic MAC-based VLAN assignment together with 802.1X or MAC authentication.
For successful dynamic MAC-based VLAN assignment, use static VLANs when you create MAC-to-VLAN entries.
The MAC-based VLAN feature is mainly configured on downlink ports of user access devices. Do not enable this function with link aggregation.
As a best practice, do not configure dynamic MAC-based VLAN assignment together with MSTP. In MSTP mode, if a port is blocked in the MSTI of the target VLAN, the port drops the received packets instead of delivering them to the CPU. As a result, the receiving port will not be dynamically assigned to the VLAN.
As a best practice, do not configure dynamic MAC-based VLAN assignment together with PVST. In PVST mode, if the target VLAN is not permitted on a port, the port is placed in blocked state. The received packets are dropped instead of being delivered to the CPU. As a result, the receiving port will not be dynamically assigned to the VLAN.
As a best practice, do not configure both dynamic MAC-based VLAN assignment and automatic voice VLAN assignment mode on a port. If you have to configure both of them on a port, configure dynamic MAC-based VLAN assignment first. If you configure them in a reverse order, conflict will occur. When you remove one of the configurations, the operation of the other is affected.