3Com Switch 4800G 24-Port Configuration Manual page 76

76 C 8: C
HAPTER ONTROLLING
Controlling Telnet Users
by Source and
Destination IP Addresses
Controlling Telnet Users
by Source MAC
Addresses
L U
OGIN SERS
To do...
Define rules for the ACL
Quit to system view
Enter user interface view
Apply the ACL to control
Telnet users by source IP
addresses
Controlling Telnet users by source and destination IP addresses is achieved by
applying advanced ACLs, which are numbered from 3000 to 3999. Refer to "ACL
Overview" on page 835 for information about defining an ACL.
To do...
Enter system view
Create an advanced ACL or
enter advanced ACL view
Define rules for the ACL
Quit to system view
Enter user interface view
Apply the ACL to control
Telnet users by specified
source and destination IP
addresses
Controlling Telnet users by source MAC addresses is achieved by applying Layer 2
ACLs, which are numbered from 4000 to 4999. Refer to "Configuring an Ethernet
Frame Header ACL" on page 845 for information about defining an ACL.
Use the command...
rule [ rule-id ] { permit |
deny } [ source { sour-addr
sour-wildcard | any } |
time-range time-name |
fragment | logging ]*
quit
user-interface [ type ]
first-number [ last-number ]
acl [ ipv6 ] acl-number
{ inbound | outbound }
Use the command...
system-view
acl [ ipv6 ] number
acl-number [ match-order
{ config | auto } ]
rule [ rule-id ] { permit |
deny } rule-string
quit
user-interface [ type ]
first-number [ last-number ]
acl [ ipv6 ] acl-number
{ inbound | outbound }
Remarks
Required
-
-
Required
The inbound keyword
specifies to filter the users
trying to Telnet to the current
switch.
The outbound keyword
specifies to filter users trying
to Telnet to other switches
from the current switch.
Remarks
-
As for the acl number
command, the config
keyword is specified by
default.
Required
You can define rules as
needed to filter by specific
source and destination IP
addresses.
-
-
Required
The inbound keyword
specifies to filter the users
trying to Telnet to the current
switch.
The outbound keyword
specifies to filter users trying
to Telnet to other switches
from the current switch.