Controlling Telnet Users; Prerequisites; Controlling Telnet Users By Source Ip Addresses; Controlling Telnet Users By Source And Destination Ip Addresses - 3Com 5500-EI PWR Install Manual

Controlling Telnet Users

Prerequisites

The controlling policy against Telnet users is determined, including the source IP addresses, destination
IP addresses and source MAC addresses to be controlled and the controlling actions (permitting or
denying).

Controlling Telnet Users by Source IP Addresses

Controlling Telnet users by source IP addresses is achieved by applying basic ACLs, which are
numbered from 2000 to 2999.
Follow these steps to control Telnet users by source IP addresses:
To do...
Enter system view
Create a basic ACL or
enter basic ACL view
Define rules for the ACL
Quit to system view
Enter user interface view
Apply the ACL to control
Telnet users by source IP
addresses

Controlling Telnet Users by Source and Destination IP Addresses

Controlling Telnet users by source and destination IP addresses is achieved by applying advanced
ACLs, which are numbered from 3000 to 3999.
Follow these steps to control Telnet users by source and destination IP addresses:
To do...
Enter system view
Create an advanced ACL
or enter advanced ACL
view
Define rules for the ACL
Quit to system view
Use the command...
system-view
acl number acl-number
[ match-order { auto |
config } ]
rule [ rule-id ] { deny |
permit } [ rule-string ]
quit
user-interface [ type ]
first-number [ last-number ]
acl acl-number { inbound |
outbound }
Use the command...
system-view
acl number acl-number
[ match-order { auto | config } ]
rule [ rule-id ] { deny | permit }
protocol [ rule-string ]
quit
8-2
Remarks
—
As for the acl number command, the
config keyword is specified by
default.
Required
—
—
Required
The inbound keyword specifies to
filter the users trying to Telnet to the
current switch.
The outbound keyword specifies to
filter users trying to Telnet to other
switches from the current switch.
Remarks
—
As for the acl number command,
the config keyword is specified by
default.
Required
You can define rules as needed to
filter by specific source and
destination IP addresses.
—