Free mobility is a solution that ensures a user obtains the same network access policy...

For resource groups, a policy is generated on the enforcement point for each resource group instead of for each IP address.

The priority of dynamically authorized members in a security group is lower than that of statically bound members.

IP address sets cannot overlap between security groups, but can overlap between resource groups.

Security groups and resource groups can be imported and exported in batches using an Excel template.

Security group members can be configured by statically binding IP addresses or dynamically delivered through Huawei proprietary RADIUS attributes.