Configuring Access ManagementFollow these steps to configure access management:To do… Use the command… RemarksEnter system view system-view —Enable accessmanagement function am enableRequiredBy default, the system disables theaccess management function.Enable accessmanagement trap am trap enableRequiredBy default, access management trap isdisabledEnter Ethernet port view interface interface-typeinterface-number —Configure the accessmanagement IP addresspool of the portam ip-pool address-listRequiredBy default, no access management IPaddress pool is configured.Display currentconfiguration of accessmanagementdisplay am[ interface-list ] Execute this command in any view.z Before configuring the access management IP address pool of a port, you need to configure theinterface IP address of the VLAN to which the port belongs, and the IP addresses in the accessmanagement IP address pool of a port must be in the same network segment as the interface IPaddress of the VLAN which the port belongs to.z If an access management address pool configured contains IP addresses that belong to the staticARP entries of other ports, the system prompts you to delete the corresponding static ARP entriesto ensure the access management IP address pool can take effect.z To allow only the hosts with their IP addresses in the access management address pool of a port toaccess external networks, do not configure static ARP entries for IP addresses not in the IPaddress pool.Access Management Configuration ExamplesAccess Management Configuration ExampleNetwork requirementsClient PCs are connected to the external network through Switch A (an Ethernet switch). The IPaddresses of the PCs of Organization 1 are in the range 202.10.20.1/24 to 202.10.20.20/24. The IPaddress of PC 2 is 202.10.20.100/24, and that of PC 3 is 202.10.20.101/24.z Allow the PCs of Organization 1 to access the external network through Ethernet 1/0/1 on Switch A.The port belongs to VLAN 1, and the IP address of VLAN-interface 1 is 202.10.20.200/24.71-2
