Vlan by mac address question

Can you vlan by mac address AND vlan by port on the same switch (well I guess if the port is set for a certain vlan it cannot use the mac vlanning), meaning can they work in the same environment? I ask this question because I'm in a bind, we used vlans at a large site and assigned vlans by port on a switch (switchport access vlan #). After this was done I found that there are at least 8 moveable carts that hold laptops, a network printer, and a wireless device- the problem is that wireless, printers, and pc's were set to be on different vlans with the setup we have and these carts are supposed to be able to move from room to room as needed. We currently have specific ports a user can use to plug in a printer and they are labled as such, wireless are in the cielings and they are patched into a poe switch set to the wireless vlans. Currently my only solution is for the end users to decide what areas they may use for the carts and for us to setup drops in those areas to be on the proper vlan. I hope I worded this so it isn't totally confusing.

I think by writing this out though I've answered my own question, if I use the mac address for vlanning then I will have to leave drops unassigned in each room for vlans, but if a drop is assigned to a vlan then one of these devices is plugged in with a mac vlan setup it will not use it since the port is set to a vlan already. So this leaves me only with the option of them giving me a list of rooms where these carts will be used, then I will lable and set the drops to be on a vlan for wireless and printers.

Thanks for reading this mess and if you have any helpfull input to add thanks even more.

Find more posts tagged with

SAVE $250 on Your Boot Camp — Use Code "EXAM26"

Exclusively for TechExams members for Infosec Boot Camps starting before April 30, 2026

View Boot Camps

Comments

Netstudent

Do you have VMPS on the network? Or a switch that can act as one?

borumas

Netstudent wrote:

Do you have VMPS on the network? Or a switch that can act as one?

Had to look that up, VLAN Management Policy Server doesn't seem to be any better of an option for this scenario as we would basically have to use mac addresses instead of port assignments for everything. Thanks for the info though, VMPS is something I hadn't heard of before, sounds interesting.

Netstudent

well I was just asking because I think you would have to have one setup for dynamic vlan assigments or MAC based assignments. But like you said, you would have to setup MAC based assigments for everything which would probably be more work than just reassigning some drop downs. maybe someone else can speak up about using dynamic and static assignments in the same environment.