Access Management Configuration Examples; Access Management Configuration Example - H3C S5600 Series Operation Manual

Access Management Configuration Examples

Access Management Configuration Example

Network requirements
Client PCs are connected to the external network through Switch A (an Ethernet switch).
The IP addresses of the PCs of Organization 1 are in the range 202.10.20.1/24 to
202.10.20.20/24. The IP address of PC 2 is 202.10.20.100/24, and that of PC 3 is
202.10.20.101/24.
Allow the PCs of Organization 1 to access the external network through GE1/0/1 on
Switch A. The port belongs to VLAN 1, and the IP address of VLAN-interface 1 is
202.10.20.200/24.
Disable the PCs that are not of Organization 1 (PC 2 and PC 3) from accessing the
external network through GE1/0/1 of Switch A.
Network diagram
Figure 1-2 Network diagram for access management configuration
PC1_1 PC1_2
202.10.20.1/24～202.10.20.20/24
Organization 1
Configuration procedure
Perform the following configuration on Switch A.
# Enable access management.
<Sysname> system-view
[Sysname] am enable
# Set the IP address of VLAN-interface 1 to 202.10.20.200/24.
[Sysname] interface Vlan-interface 1
[Sysname-Vlan-interface1] ip address 202.10.20.200 24
[Sysname-Vlan-interface1] quit
# Configure the access management IP address pool on GigabitEthernet 1/0/1.
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] am ip-pool 202.10.20.1 20
Internet
Switch A
GE1/0/1 Vlan-int1
202.10.20.200/24
Switch B
PC 2
PC1_20
202.10.20.100/24 202.10.20.101/24
PC 3
1-3