Combining Access Management With Port Isolation - 3Com 5500-EI PWR Install Manual

[Sysname-Ethernet1/0/1] am ip-pool 202.10.20.1 20

Combining Access Management with Port Isolation

Network requirements
Client PCs are connected to the external network through Switch A (an Ethernet switch).
The IP addresses of the PCs of Organization 1 are in the range 202.10.20.1/24 to
202.10.20.20/24, and those of the PCs in Organization 2 are in the range 202.10.20.25/24
to 202.10.20.50/24 and the range 202.10.20.55 to 202.10.20.65/24.
Allow the PCs of Organization 1 to access the external network through Ethernet 1/0/1
of Switch A.
Allow the PCs of Organization 2 to access the external network through Ethernet 1/0/2
of Switch A.
Ethernet 1/0/1 and Ethernet 1/0/2 belong to VLAN 1. The IP address of VLAN-interface
1 is 202.10.20.200/24.
PCs of Organization 1 are isolated from those of Organization 2 on Layer 2.
Network diagram
Figure 1-3 Network diagram for combining access management and port isolation
Switch B
PC1_1 PC1_2
202.10.20.1/24～202.10.20.20/24
Organization1
Configuration procedure
Perform the following configuration on Switch A.
For information about port isolation and the corresponding configuration, refer to the Port
Isolation Operation.
# Enable access management.
<Sysname> system-view
[Sysname] am enable
Internet
Switch A
Eth1/0/1 Eth1/0/2
Vlan-int1
202.10.20.200/24
PC2_1
PC1_20
202.10.20.25/24～202.10.20.50/24
202.10.20.55/24～202.10.20.65/24
Organization2
Switch C
PC2_2
PC2_37
1-4