1-1 
1  Access Management Configuration 
When configuring access management, go to these sections for information you are interested in: 
z  Access Management Overview 
z  Configuring Access Management 
z  Access Management Configuration Examples 
Access Management Overview 
Normally, client PCs in a network are connected to switches operating on the network access layer 
(also referred to as access switches) through Layer 2 switches; and the access switches provide 
external network accesses for the client PCs through their upstream links. In the network shown in 
Figure 1-1, Switch A is an access switch; Switch B is a Layer 2 switch. 
Figure 1-1 Typical Ethernet access networking scenario 
Switch A
Switch B
GE1/0/1
PC1_1 PC1_2
PC1_n
PC2 PC3
Internet
Organization 1
 
 
The access management function aims to manage user access rights on access switches. It enables 
you to manage the external network access rights of the hosts connected to ports of an access switch. 
To implement the access management function, you need to configure an IP address pool on a port of 
an access switch, that is, bind a specified range of IP addresses to the port.  
z  A port with an access management IP address pool configured only allows the hosts with their IP 
addresses in the access management IP address pool to access external networks. 
z  A port without an access management IP address pool configured allows the hosts to access 
external networks only if their IP addresses are not in the access management IP address pools of 
other ports of the switch. 
Note that the IP addresses in the access management IP address pool configured on a port must be in 
the same network segment as the IP address of the VLAN (where the port belongs to) interface.