H3C S3600 Series User Manual

Operation Manual – Access Management
H3C S3600 Series Ethernet Switches-Release 1510
Chapter 1
Access Management
Configuration
1-2
Isolation measure is required, because otherwise the PCs in two organizations may
interwork with each other. The L2 isolation function at the switch port can ensure two
ports do not receive the packets from the other port, so that only those PCs in the same
organization can communicate with each other.
1.2 Configure Access Management
Access management configuration includes:
z Enable access management function
z Configure the access IP address pool based on the physical port
z Configure Layer 2 isolation between ports
z Enable access management trap
1.2.1 Enable Access Management Function
You can use the following command to enable access management function. Only after
the access management function is enabled globally will the access management
features (IP and port binding) take effect.
Table 1-1 Enable access management function
Operation Command Description
Enter system view
system-view
—
Enable access
management function
am enable
Required
By default, the system disables the
access management function.
1.2.2 Configure the Access IP Address Pool Based on the Physical Port
You can use the following command to set the IP address pool for access management
on a port. The packet whose source IP address is in the specified pool is allowed to be
forwarded on Layer 3 via the port of the switch.
Table 1-2 Configure the access IP address pool based on the physical port
Operation Command Description
Enter system view
system-view
—
Enter Ethernet port view
interface interface-type
interface-number
—

H3C S3600 Series Specifications

General

Brand	H3C
Model	S3600 Series
Category	Switch
Language	English