Telnet Login Control Configuration Example - HP 830 Series Configuration Manual

Step
3. Configure an ACL rule.
4. Exit Ethernet frame header
ACL view.
5. Enter user interface view.
6. Use the ACL to control user
logins by source MAC
address.

Telnet login control configuration example

The configuration example was created on the 10500/7500 20G unified wired-WLAN module and
might vary with device models.
When configuring the 10500/7500 20G unified wired-WLAN module, make sure the settings are
correct (including VLAN settings) on the internal Ethernet interface that connects the module to the switch.
For more information, see HP 10500/7500 20G Unified Wired-WLAN Module Fundamentals
Configuration Guide.
By default, the aggregate interfaces between the access controller engine and the switching engine on
an 830 switch are Access interfaces in VLAN 1. When configuring the two aggregate interfaces, make
sure their permitted VLANs are the same. HP also recommends setting their link type to be the same.
Network requirements
Configure the AC in
Figure 20 Network diagram
Host B
10.110.100.46/24
Configuration procedure
# Configure basic ACL 2000, and configure rule 1 to permit packets sourced from Host B and rule 2 to
permit packets sourced from Host A.
<AC> system-view
[AC] acl number 2000 match-order config
[AC-acl-basic-2000] rule 1 permit source 10.110.100.52 0
[AC-acl-basic-2000] rule 2 permit source 10.110.100.46 0
[AC-acl-basic-2000] quit
Command
rule [ rule-id ] { permit | deny }
rule-string
quit
user-interface { first-num1
[ last-num1 ] | { aux | console |
vty } first-num2 [ last-num2 ] }
acl acl-number inbound
Figure 20 to permit only incoming Telnet packets sourced from Host A and Host B.
Host A
10.110.100.52/24
IP network
AC
55
Remarks
N/A
N/A
N/A
inbound: Filters incoming packets.