3Com SuperStack 4, Руководство по настройке

Страница: 90 / 432

102 C
HAPTER
5: N
ETWORK
P
ROTOCOL
O
PERATION
By default, the IP address pools for access control on the port are null and all the
packets are permitted.
Note that if the IP address pool to be configured contains the IP addresses
configured in the static ARP at other ports, then the system prompts you to delete
the static ARP to make the later binding effective.
Configuring Layer 2 Isolation Between Ports
You can add a port to an isolation group using the following commands, and
achieve port-to-port isolation between this port and other ports of this group, that
is, Layer 2 forwarding between the isolated ports is not available.
Perform the following configuration in Ethernet Port View.
By default, a port is not in an isolation group, that is Layer 2 forwarding is
achievable between this port and other ports.
Note that:
■
One unit only supports one isolation group. That is, a port in an isolation group
on a unit is isolated only from ports within this group, and not isolated from
ports in isolation groups on other units.
■
The port isolation feature is synchronous on the same unit within an
aggregation group. Note the following:
■
When a port in an aggregation group is added to, or removed from, an
isolation group, then all the other ports of this aggregation group on the
same unit are automatically added in or removed from this isolation group.
■
In the same aggregation group, the port isolation feature on one unit is
consistent.
■
If a port is removed from an aggregation group, its port isolation
configuration will not change.
■
If a port of an aggregation group is isolated on unit 1, then you can achieve
port-to-port isolation between this aggregation group and all the ports of
the isolation group on unit 1.
■
If all the ports on unit 1 of this aggregation group are removed from this
aggregation group, then the isolation feature of this aggregation group is
disabled, that is, the port-to-port isolation mentioned above is unavailable.
Enabling/Disabling Access Management Trap
You can enable the access management trap function using the following
commands. When this function is enabled, the trap information of access
management is delivered to the console for the purpose of monitoring.
Table 97 Configuring Layer 2 Isolation Between Ports
Operation Command
Add a port to the isolation group
port isolate
Remove a port from the isolation group
undo port isolate