Snmp Login Control Configuration Example; Configuring Web Login Control - HP 830 Series Configuration Manual

SNMP login control configuration example

The configuration example was created on the 10500/7500 20G unified wired-WLAN module and
might vary with device models.
When configuring the 10500/7500 20G unified wired-WLAN module, make sure the settings are
correct (including VLAN settings) on the internal Ethernet interface that connects the module to the switch.
For more information, see HP 10500/7500 20G Unified Wired-WLAN Module Fundamentals
Configuration Guide.
By default, the aggregate interfaces between the access controller engine and the switching engine on
an 830 switch are Access interfaces in VLAN 1. When configuring the two aggregate interfaces, make
sure their permitted VLANs are the same. HP also recommends setting their link type to be the same.
Network requirements
Configure the AC in
Figure 21 Network diagram
Configuration procedure
# Create ACL 2000, and configure rule 1 to permit packets sourced from Host B and rule 2 to permit
packets sourced from Host A.
<AC> system-view
[AC] acl number 2000 match-order config
[AC-acl-basic-2000] rule 1 permit source 10.110.100.52 0
[AC-acl-basic-2000] rule 2 permit source 10.110.100.46 0
[AC-acl-basic-2000] quit
# Associate the ACL with the SNMP community and the SNMP group.
[AC] snmp-agent community read aaa acl 2000
[AC] snmp-agent group v2c groupa acl 2000
[AC] snmp-agent usm-user v2c usera groupa acl 2000

Configuring Web login control

Use a basic ACL (2000 to 2999) to filter HTTP/HTTPS traffic by source IP address for Web login control.
To access the AC, a Web user must use an IP address permitted by the ACL.
You can also log off suspicious Web users that have been logged in.
Figure 21 to allow only Host A and Host B to access the AC through SNMP.
57