Configuring Access Management - 3Com 5500-EI PWR Install Manual

A port without an access management IP address pool configured allows the hosts to
access external networks only if their IP addresses are not in the access management
IP address pools of other ports of the switch.
Note that the IP addresses in the access management IP address pool configured on a port
must be in the same network segment as the IP address of the VLAN (where the port
belongs to) interface.

Configuring Access Management

Follow these steps to configure access management:
To do...
Enter system view
Enable access
management function
Enable access
management trap
Enter Ethernet port view
Configure the access
management IP address
pool of the port
Display current
configuration of access
management
Before configuring the access management IP address pool of a port, you need to
configure the interface IP address of the VLAN to which the port belongs, and the IP
addresses in the access management IP address pool of a port must be in the same
network segment as the interface IP address of the VLAN which the port belongs to.
If an access management address pool configured contains IP addresses that belong
to the static ARP entries of other ports, the system prompts you to delete the
corresponding static ARP entries to ensure the access management IP address pool
can take effect.
To allow only the hosts with their IP addresses in the access management address pool
of a port to access external networks, do not configure static ARP entries for IP
addresses not in the IP address pool.
Use the command...
system-view
am enable
am trap enable
interface
interface-type
interface-number
am ip-pool
address-list
display am
[ interface-list ]
1-2
Remarks
—
Required
By default, the system disables the
access management function.
Required
By default, access management
trap is disabled
—
Required
By default, no access management
IP address pool is configured.
Execute this command in any view.