Access Management Configuration Commands 125
ip-pool Enter to configure IP address pool for access management.
address-list
Enter IP address list in the
start_ip_address
[
ip_address_num
]
& < 1-10 > format.
start_ip_address
is the start address of an IP address range in the pool.
ip_address_num
specifies how many IP addresses following
start_ip_address
in
the range.
&< 1-10 > means you can specify ten IP address ranges at most.
Description
Use the am ip-pool command to configure the IP address pool for access
management on a port. The packet whose source IP address is in the specified
pool is allowed to be forwarded on Layer 3 via the port of the switch.
Use the undo am ip-pool command to cancel the access management IP pool of
the port.
By default, all the IP address pools for access control on the port are null and all
the packets are permitted through.
Note that if the IP address pool to be configured contains the IP addresses
configured in the static ARP at other ports, then the system prompts you to delete
the static ARP to make the later binding effective.
Example
To configure the access management IP address pool on Ethernet1/0/1 and
permits the addresses from 202.112.66.2 through 202.112.66.20 and the
specified 202.112.65.1 to access the port, enter the following:
<SW5500>system-view
System View: return to User View with Ctrl+Z.
[SW5500]interface gigabitethernet 1/0/1
[SW5500-GigabitEthernet1/0/1]am ip-pool 202.112.66.2 19 202.112.65.1
am trap enable Syntax
am trap enable
undo am trap enable
View
System View
Parameter
None
Description
Use the am trap enable command to enable the access management trap
function.
To Next Page
Loading...
