Operation Manual - Network Protocol
Quidway S3000-EI Series Ethernet Switches Chapter 5
Access Management Configuration
Huawei Technologies Proprietary
5-2
z Configure Layer 2 isolation between ports
ress binding
5.2.1 Ena
gement function. Only after
will the access management features (IP
ake effect.
z Enable access management function
z Configure port, IP address and MAC add
ble Access Management Function
You can use the following command to enable access mana
the access management function is enabled
and port binding and Layer 2 port isolation) t
Perform the following configuration in System view.
Table 5-1 Enable/Disable access management function
Operation Command
Enable access management function
am enabl
e
Disable access management function
undo am enab
le
B ss t function.
5.2.2 Configure Layer 2 Isolation between Ports
You can use the following command to set Layer 2 isolation on a port so as to prevent
ied port and some
ce view.
y default, the system disables the acce managemen
the packets from being forwarded on Layer 2 between the specif
other ports (group).
Perform the following configuration in Ethernet interfa
Table 5-2 Configure Layer 2 isolation between ports
Operation Command
Configure Layer 2 isolation between ports
am isolate interface-list
Cancel Layer 2 isolation between ports
undo am isola
te interface-list
By default, the iso ool is null and the packets are e forwarded
b on
5.2.3 Conf Add
Perform the following actions to bind the port, IP address and MAC address.
z Port+IP binding: binding the packet’s receiving port and its source IP address. The
specified port will only allow the packet with specified IP address to pass;
lation port p allowed to b
etween the specified port and all other ports Layer 2.
igure Port, IP Address and MAC ress Binding
The system supports the following binding combination: Port+IP, Port+MAC,
Port+IP+MAC, and IP+MAC.