User manual
APS User Manual
181
1.2.11-6 MAC-based VLAN
One of the most common ways of grouping VLAN members is by port, hence the name port-based
VLAN. Typically, the device adds the same VLAN tag to untagged packets that are received through
the same port. Later on, these packets can be forwarded in the same VLAN. Port-based VLAN’s are
easy to configure, and applies to networks where the locations of terminal devices are relatively
fixed. As mobile office and wireless network access gain more popularity, the ports that terminal
devices use to access the networks are very often non-fixed. A device may access a network through
Port A this time, but through Port B the next time. If Port A and Port B belong to different VLANs, the
device will be assigned to a different VLAN the next time it accesses the network. As a result, it will
not be able to use the resources in the old VLAN. On the other hand, if Port A and Port B belong to
the same VLAN, after terminal devices access the network through Port B, they will have access to
the same resources as those accessing the network through Port A do, which brings security issues.
To provide user access and ensure data security in the meantime, the MAC-based VLAN technology
was developed.
MAC-based VLAN’s, group VLAN members by MAC address. With MAC-based VLAN configured, the
device adds a VLAN tag to an untagged frame according to its source MAC address. MAC-based
VLANs are mostly used in conjunction with security technologies such as 802.1X to provide secure,
flexible network access for terminal devices.
1.2.11-6-1 Configuration
The MAC-based VLAN entries can be configured here. This page allows for adding and deleting MAC-
based VLAN entries and assigning the entries to different ports. This page shows only static entries.
Web Interface
To configure MAC-based VLAN settings via the Web Interface:
1. Click Configuration, VLAN, MAC-based VLAN’s and Configuration.
2. Specify the MAC Address and VLAN ID.
3. Click the Apply button to save your changes or the Reset button to revert to previous
settings.