TP-Link T1600G-18TS Configuration Manual page 85

Managing System
Step 2 Use the following command to control the users' access by limiting the IP address:
user access-control ip-based { ip-addr ip-mask } [ snmp ] [ telnet ] [ ssh ] [ http ] [ https ] [ ping
] [ all ]
Only the users within the IP-range you set here are allowed to access the switch.
ip-addr
ip-mask
[ snmp ] [ telnet ] [ ssh ] [ http ] [ https ] [ ping ] [ all
accessing. By default, these types are all enabled.
Use the following command to control the users' access by limiting the MAC address:
user access-control mac-based { mac-addr } [ snmp ] [ telnet ] [ ssh ] [ http ] [ https ] [ ping ] [
all ]
Only the users with the MAC address you set here are allowed to access the switch.
mac-addr
[ snmp ] [ telnet ] [ ssh ] [ http ] [ https ] [ ping ] [ all
accessing. By default, these types are all enabled.
Use the following command to control the users' access by limiting the ports connected to the
users:
user access-control port-based interface { fastEthernet port-list | gigabitEthernet port-list |
ten-gigabitEthernet port-list } [ snmp ] [ telnet ] [ ssh ] [ http ] [ https ] [ ping ] [ all ]
Only the users connecting to the ports you set here are allowed to access the switch.
port-list
most.
[ snmp ] [ telnet ] [ ssh ] [ http ] [ https ] [ ping ] [ all
accessing. By default, these types are all enabled.
Step 3 show user configuration
Verify the security configuration information of the user authentication information and the
access interface.
Step 4 end
Return to privileged EXEC mode.
Step 5 copy running-config startup-config
Save the settings in the configuration file.
The following example shows how to set the type of access control as IP-based. Set the
IP address as 192.168.0.100,set the subnet mask as 255.255.255.0 and make the switch
support snmp, telnet, http and https.
Switch#configure
Switch(config)#user access-control ip-based 192.168.0.100 255.255.255.0 snmp telnet
http https
Switch(config)#show user configuration
: Specify the IP address of the user.
: Specify the subnet mask of the user.
: Specify the MAC address of the user.
: Specify the list of Ethernet port, in the format of 1/0/1-4. You can appoint 5 ports at
Access Security Configurations
]: Select to control the types for users'
]: Select to control the types for users'
]: Select to control the types for users'
Configuration Guide 62