Controlling User Logins; Controlling Telnet Logins; Controlling Telnet Users By Client Ssids; Configuring Source Ip-Based Telnet Login Control - HP 830 Series Configuration Manual

Controlling user logins

Use ACLs to prevent unauthorized logins. For more information about ACLs, see ACL and QoS
Configuration Guide.

Controlling Telnet logins

Use a basic ACL (2000 to 2999) to filter Telnet traffic by source IP address. Use an advanced ACL (3000
to 3999) to filter Telnet traffic by source and/or destination IP address. Use an Ethernet frame header
ACL (4000 to 4999) to filter Telnet traffic by source MAC address.
To access the device, a Telnet user must match a permit statement in the ACL applied to the user interface.

Controlling Telnet users by client SSIDs

Controlling Telnet users by service set identifiers (SSIDs) is achieved by matching WLAN ACLs with
packets based on SSIDs of clients. WLAN ACLs are numbered from 100 to 199. For information about
defining an ACL, see ACL and QoS Configuration Guide.
To control Telnet users by client SSIDs:
Step
1. Enter system view.
2. Create a WLAN ACL and enter
WLAN ACL view.
3. Define a rule for the WLAN
ACL.
4. Exit to system view.
5. Enter user interface view.
6. Apply the WLAN ACL to
control Telnet users by SSIDs of
WLAN clients.

Configuring source IP-based Telnet login control

Step
1. Enter system view.
2. Create a basic ACL and enter
its view, or enter the view of
an existing basic ACL.
Command
system-view
acl number acl-number
rule [ rule-id ] { permit | deny } [ ssid
ssid-name ]
quit
user-interface { first-num1
[ last-num1 ] | { aux | console | vty }
first-num2 [ last-num2 ] }
acl acl-number inbound
Command
system-view
acl [ ipv6 ] number acl-number
[ match-order { config | auto } ]
53
Remarks
N/A
N/A
N/A
N/A
N/A
Use the inbound keyword to
filter users trying to Telnet to the
current AC.
Remarks
N/A
By default, no basic ACL
exists.