This method of division is to divide the VLAN based on the MAC address of each host, i.e., for each MAC address of host to which it belongs to the group are arranged. When this method of VLAN biggest advantage is that when the mobile user's physical location, i.e., change from one switch to another switch, VLAN without reconfiguration, it is possible that this method of division according to the MAC address is user-based VLAN, the disadvantage of this method is the initialization, all users must be configured, if there are hundreds or even thousands of users, configuration is very tired. But this method also results in a reduction division of the efficiency of the switch, because each switch port may exist many members of VLAN groups in, so you can not limit the broadcast packets. In addition, for users of laptops, their card may be changed frequently, so, VLAN configuration must be kept.
Divided by the network layer
This method of division is based VLAN network layer address or protocol type for each host (if multi-protocol) division, although this classification is based on a network address, such as IP address, but it is not routed, and the network layer routing nothing to do.
The advantage of this method is that the physical location of the user changes, need to reconfigure VLAN belongs, and may be divided VLAN protocol type, which is very important for network managers, and which does not require additional frame tag identifying VLAN, thus reducing network traffic.
A disadvantage of this process is inefficient, since each network layer address check packet is (with respect to the two previous methods) consumed processing time, a general switch chip can automatically check the Ethernet frame packet network head, but let the chips can check the IP header, higher technology, but also more time-consuming. Of course, this is related to each vendor's implementation.