2ADDRESS MANAGEMENT
CONFIGURATION
Introduction to
Address Management
You can easily configure the switch on which the Address Manage (AM) feature is
enabled to allow a user with the specified MAC address to gain network access
through the specified IP address in a small network, such as a campus network. This
facilitates the implementation of user management and accounting.
Configuring Address
Management
Address management configuration tasks include:
■Configuring a port-based address management IP address pool
■Binding the MAC address and IP address of a legal user to the specified port
Configuring a
Port-Based Address
Management IP Address
Pool
By setting an address management IP address pool on a port, you can allow a user
with the specified IP addresses to access the network. The Ethernet switch allows the
packets in the IP address pool whose IP addresses are the source IP addresses to pass
the port for layer 3 forwarding. The switch does not forward any packet from any IP
address not configured in the IP address pool.
When you are configuring an address management IP address pool on a port, if the IP
addresses in this IP address pool are those configured in the static ARP on another
port, the system will prompt you to delete the corresponding static ARP to ensure
that the binding takes effect.
You cannot configure static ARP for the IP address restricted by AM; otherwise, AM
fails.
Binding the MAC
Address and IP Address
of a Legal User to the
Specified Port
This configuration binds the specified MAC addresses and IP addresses, only allowing
the packets from legal MAC addresses and legal IP addresses to be forwarded by the
switch. None of the following combinations enables network access through the
switch:
■Illegal MAC address + illegal IP address
■Legal MAC address + illegal IP address
■Illegal MAC address + legal IP address
Table30 Configure a port-based address management IP address pool
Operation Command Description
Enter system view system-view -
Enable address management am enable Required
The IP address pool configured on
each port to control layer 3
forwarding takes effect only after
address management is enabled.
Enter Ethernet port view interface interface-type
interface-number
-
Configure an address
management IP address pool
on a port
am ip-pool { address-list } Required
By default, the address
management IP address pool on
each port is null; that is, the switch
permits all packets to pass.