3com 5500 用户手册
Configuring Access Management with Port Isolation
335
Configuring Access
Management with
Port Isolation
Management with
Port Isolation
Network Diagram
Figure 117 Network diagram for access management and port isolation configuration
Networking and
Configuration
Requirements
Client PCs are connected to the Internet through Switch A. The IP address range
for organization 1 is 202.10.20.1/24 to 202.10.20.20/24; and the IP address
ranges for organization 2 are 202.10.20.25/24 to 202.10.20.50/24 and
202.10.20.55/24 to 202.10.20.65/24.
for organization 1 is 202.10.20.1/24 to 202.10.20.20/24; and the IP address
ranges for organization 2 are 202.10.20.25/24 to 202.10.20.50/24 and
202.10.20.55/24 to 202.10.20.65/24.
■
PCs of organization 1 are allowed to access the Internet through Ethernet 1/0/1
of Switch A.
of Switch A.
■
PCs of organization 2 are allowed to access the Internet through Ethernet 1/0/2
of Switch A.
of Switch A.
■
Both Ethernet 1/0/1 and Ethernet 1/0/2 belong to VLAN 1, and the IP address
of VLAN-interface 1 is 202.10.20.200/24.
of VLAN-interface 1 is 202.10.20.200/24.
■
PCs of organization 1 are isolated from those of organization 2 at Layer 2.
Applicable Products
Configuration Procedure
# Enable access management on Switch A.
[SwitchA] am enable
Switch A
Switch B
Eth1/0/1
PC1_1
PC1_2
PC1_20
Internet
202.10.20.1/24
̚202.10.20.20/24
Switch C
Eth1/0/2
PC2_1
PC2_2
PC2_37
Organization2
Organization1
202.10.20.25/24
̚202.10.20.50/24
202.10.20.55/24
̚202.10.20.65/24
Vlan-int1
202.10.20.200/24
Product series
Software version Hardware version
Switch 5500
Release V03.02.04
All versions
Switch 5500G
Release V03.02.04
All versions
Switch 4500
Release V03.03.00
All versions