Configuration restrictions and guidelines
When you configure MAC-based VLANs, follow these restrictions and guideline:
Do not configure a VLAN as both a super VLAN and a MAC-based VLAN.
As a best practice, do not both configure dynamic MAC-based VLAN assignment and disable MAC address learning on a port. If the two features are configured together on a port, the port forwards only packets matching the MAC-to-VLAN entry and drops unmatching packets.
Do not use dynamic MAC-based VLAN assignment together with 802.1X or MAC authentication.
For successful dynamic MAC-based VLAN assignment, use static VLANs when you create MAC-to-VLAN entries.
The MAC-based VLAN feature is mainly configured on downlink ports of user access devices. Do not enable this function with link aggregation.
As a best practice, do not use dynamic MAC-based VLAN assignment together with MSTP. In MSTP mode, if a port is blocked in the MSTI of the target VLAN, the port drops the received packets instead of delivering them to the CPU. As a result, the receiving port will not be dynamically assigned to the VLAN.
As a best practice, do not use dynamic MAC-based VLAN assignment together with PVST. In PVST mode, if the target VLAN is not permitted on a port, the port is placed in blocked state. The received packets are dropped instead of being delivered to the CPU. As a result, the receiving port will not be dynamically assigned to the VLAN.
As a best practice, do not configure both dynamic MAC-based VLAN assignment and automatic voice VLAN assignment mode on a port. If you have to configure both of them on a port, configure dynamic MAC-based VLAN assignment first. If you configure them in a reverse order, conflict will occur. When you remove one of the configurations, the operation of the other is affected.