1-2z A port without an access management IP address pool configured allows the hosts toaccess external networks only if their IP addresses are not in the access managementIP address pools of other ports of the switch.Note that the IP addresses in the access management IP address pool configured on a portmust be in the same network segment as the IP address of the VLAN (where the portbelongs to) interface.Configuring Access ManagementFollow these steps to configure access management:To do… Use the command… RemarksEnter system view system-view —Enable accessmanagement function am enableRequiredBy default, the system disables theaccess management function.Enable accessmanagement trap am trap enableRequiredBy default, access management trap isdisabledEnter Ethernet port view interface interface-typeinterface-number —Configure the accessmanagement IP addresspool of the portam ip-pool address-listRequiredBy default, no access management IPaddress pool is configured.Display currentconfiguration of accessmanagementdisplay am[ interface-list ] Execute this command in any view.z Before configuring the access management IP address pool of a port, you need toconfigure the interface IP address of the VLAN to which the port belongs, and the IPaddresses in the access management IP address pool of a port must be in the samenetwork segment as the interface IP address of the VLAN which the port belongs to.z If an access management address pool configured contains IP addresses that belongto the static ARP entries of other ports, the system prompts you to delete thecorresponding static ARP entries to ensure the access management IP address poolcan take effect.z To allow only the hosts with their IP addresses in the access management address poolof a port to access external networks, do not configure static ARP entries for IPaddresses not in the IP address pool.
