Operation Manual - Network Protocol
Quidway S3500 Series Ethernet Switches
Isolation measure is required, because otherwise the PCs in two organizations may
interwork with each other. The L2 isolation function at the switch port can ensure two
ports do not receive the packets from the other port, so that only those PCs in the same
organization can communicate with each other.
8.2 Configure Access Management
Access management configuration includes:
Enable access management function
Configure the access IP address pool based on the physical port
Configure Layer 2 isolation between ports (Only for S3526/S3526 FM/S3526
FS/S3526E/S3526E FM/S3526E FS/S3526C in S3500 series switches.)
Configuring
S3552G/S3552P/S3528G/S3528P/ S3552F in S3500 series switches).
Configure port, IP address and MAC address binding (Only for S3526E/S3526E
FM/S3526E FS/S3526C in S3500 series switches)
Enable/Disable access management trap
8.2.1 Enable Access Management Function
You can use the following command to enable access management function. Only after
the access management function is enabled globally will the access management
features (IP and port binding) take effect.
Perform the following configuration in System view.
Table 8-1 Enable/Disable access management function
Enable access management function
Disable access management function
By default, the system disables the access management function.
8.2.2 Configure the Access IP Address Pool Based on the Physical Port
You can use the following command to set the IP address pool for access management
on a port. The packet whose source IP address is in the specified pool is allowed to be
forwarded on Layer 3 via the port of the switch.
Perform the following configuration in Ethernet interface view.
the
port
isolation
Operation
Huawei Technologies Proprietary
8-2
Chapter 8 Access Management Configuration
on
a
per-VLAN
Command
am enable
undo am enable
basis
(Only
for