Controlling Telnet Users By Source And Destination Ip Addresses - Huawei Quidway S3100 Series Operation Manual

Operation Manual – Login
Quidway S3100 Series Ethernet Switches
Table 7-2 Control Telnet users by source IP addresses
Operation
Enter system view
Create
ACL or enter basic
ACL view
Define rules for the
ACL
Quit
view
Enter
interface view
Apply the ACL to
control
users by source IP
addresses

7.2.3 Controlling Telnet Users by Source and Destination IP Addresses

Controlling Telnet users by source and destination IP addresses is achieved by
applying advanced ACLs, which are numbered from 3000 to 3999. Refer to the ACL
module for information about defining an ACL.
Table 7-3 Define an advanced ACL
Operation
Enter system view
Create
advanced ACL or
enter
ACL view
Define rules for the
ACL
system-view
a basic acl number
[ match-order { config |
auto } ]
rule [ rule-id ] { permit |
deny } [ source { sour-addr
sour-wildcard | any } ]
[ time-range time-name ]
[ fragment ]
to system
quit
user user-interface
first-number [ last-number ]
Telnet acl acl-number { inbound |
outbound }
system-view
an
acl number
[ match-order { config |
advanced
auto } ]
rule [ rule-id ] { permit |
deny } rule-string
Huawei Technologies Proprietary
Command
acl-number
[ type ]
Command
acl-number
7-2
Chapter 7 Controlling Login Users
Description
—
As for the acl
command, the
keyword is specified
default.
Required
—
—
Required
The inbound
specifies to filter the users
trying to Telnet to the current
switch.
The outbound
specifies to filter users trying
to Telnet to other switches
from the current switch.
Description
—
As for the acl
command, the
keyword is specified
default.
Required
You can define rules as
needed to filter by specific
source and destination IP
addresses.
number
config
by
keyword
keyword
number
config
by