3Com 4200G 12-Port Configuration Manual page 50

36 C 7: C
HAPTER ONTROLLING
Controlling Telnet Users
by Source and
Destination IP Addresses
Configuration
Example
L U
OGIN SERS
Controlling Telnet users by source and destination IP addresses is achieved by applying
advanced ACLs, which are numbered from 3000 to 3999. Refer to the ACL module
for information about defining an ACL.
Table 26 Define an advanced ACL
Operation
Enter system view
Create an advanced
ACL or enter advanced
ACL view
Define rules for the
ACL
Quit to system view
Enter user interface
view
Apply the ACL to
control Telnet users by
specified source and
destination IP
addresses
Network requirements
Only the Telnet users sourced from the IP address of 10.110.100.52 and
10.110.100.46 are permitted to log into the switch.
Network diagram
Figure 16 Network diagram for controlling Telnet users using ACLs
Configuration procedure
1 Define a basic ACL.
<S4200G> system-view
[4200G] acl number 2000 match-order config
[4200G-acl-basic-2000] rule 1 permit source 10.110.100.52 0
[4200G-acl-basic-2000] rule 2 permit source 10.110.100.46 0
[4200G-acl-basic-2000] rule 3 deny source any
[4200G-acl-basic-2000] quit
2 Apply the ACL.
[4200G] user-interface vty 0 4
[4200G-ui-vty0-4] acl 2000 inbound
Command
system-view
acl number acl-number [
match-order { config | auto } ]
rule [ rule-id ] { permit | deny }
rule-string
quit
user-interface [ type ]
first-number [ last-number ]
acl acl-number { inbound |
outbound }
Internet Internet
Sw itch Sw itch
Description
As for the acl number command,
the config keyword is specified by
default.
Required
You can define rules as needed to
filter by specific source and
destination IP addresses.
Required
The inbound keyword specifies to
filter the users trying to Telnet to
the current switch.
The outbound keyword specifies
to filter users trying to Telnet to
other switches from the current
switch.