Configuration Example - Huawei Quidway S3100 Series Operation Manual

Operation Manual – Login
Quidway S3100 Series Ethernet Switches
Operation
Quit to
view
Enter
interface view
Apply the ACL to
control
users by specified
source
destination
addresses
Note:
You can define ACL rules to filter the source IP, destination IP, source port and
destination port. But the system cannot match such advanced fields as fragment, tos,
precedence and dscp defined in ACL rules here.

7.2.4 Configuration Example

I. Network requirements
Only the Telnet users sourced from the IP address of 10.110.100.52 and 10.110.100.46
are permitted to log into the switch.
II. Network diagram
Internet Internet
Sw itch Sw itch
Figure 7-1 Network diagram for controlling Telnet users using ACL
III. Configuration procedure
# Define a basic ACL.
<Quidway> system-view
Command
system
quit
user user-interface
first-number [ last-number ]
Telnet
acl acl-number { inbound |
and outbound }
IP
Huawei Technologies Proprietary
7-3
Chapter 7 Controlling Login Users
—
[ type ]
—
Required
The inbound
specifies to filter the users
trying to Telnet to the current
switch.
The outbound
specifies to filter users trying
to Telnet to other switches
from the current switch.
Description
keyword
keyword
s