1-2Configuring Access ManagementFollow these steps to configure access management:To do… Use the command… RemarksEnter system view system-view —Enable access managementfunction am enableRequiredBy default, the system disablesthe access managementfunction.Enable access managementtrap am trap enableRequiredBy default, accessmanagement trap is disabledEnter Ethernet port view interface interface-typeinterface-number —Configure the accessmanagement IP address poolof the portam ip-pool address-listRequiredBy default, no accessmanagement IP address pool isconfigured.Display current configuration ofaccess management display am [ interface-list ] Execute this command in anyview.z Before configuring the access management IP address pool of a port, you need to configure theinterface IP address of the VLAN to which the port belongs, and the IP addresses in the accessmanagement IP address pool of a port must be in the same network segment as the interface IPaddress of the VLAN which the port belongs to.z If an access management address pool configured contains IP addresses that belong to the staticARP entries of other ports, the system prompts you to delete the corresponding static ARP entriesto ensure the access management IP address pool can take effect.z To allow only the hosts with their IP addresses in the access management address pool of a port toaccess external networks, do not configure static ARP entries for IP addresses not in the IPaddress pool.Access Management Configuration ExamplesAccess Management Configuration ExampleNetwork requirementsClient PCs are connected to the external network through Switch A (an Ethernet switch). The IPaddresses of the PCs of Organization 1 are in the range 202.10.20.1/24 to 202.10.20.20/24. The IPaddress of PC 2 is 202.10.20.100/24, and that of PC 3 is 202.10.20.101/24.
