Define An Acl; Call Acl To Control Snmp User - Huawei Quidway S5000 Series Operation Manual

Operation Manual - QoS/ACL
Quidway S5000 Series Ethernet Switches

3.3.1 Define an ACL

You can only call the numbered basic ACL, ranging from 2000 and 2999, to implement
ACL control function. Use the same configuration commands introduced in the last
section.

3.3.2 Call ACL to Control SNMP User

To control the NM users with ACL, call the defined ACL when configuring SNMP
community name, username, and group name.
You can use the following commands to call an ACL.
Perform the following configuration in system view.
Table 3-3 Define a numbered basic ACL
Call an ACL when configuring
SNMP community name.
Call an ACL when configuring
SNMP group name.
Call an ACL when configuring
SNMP username.
SNMP community name attribute is a feature of SNMP V1. Therefore calling an ACL for
SNMP community name configuration can filter the access to SNMP V1network
management system.
SNMP group name and username attribute is a feature of SNMP V2C and above.
Therefore calling an ACL for SNMP community name configuration can filter the access
to the network management system of SNMP V2C or higher. If you configure ACL
control in both of the commands, the switch will filter the NM users concerning both the
features.
Note:
You can call different ACLs for the above mentioned commands.
For more about the commands, refer to the Command Manual.
Operation
snmp-agent community { read | write } community-name [ [ mib-view
view-name ] | [ acl acl-number ] ]*
snmp-agent group { v1 | v2c } group-name [ read-view read-view ]
[ write-view write-view ] [ notify-view notify-view ] [ acl acl-list ]
snmp-agent group v3 group-name [ authentication | privacy ] [ read-view
read-view ] [ write-view write-view ] [ notify-view notify-view ] [ acl acl-list ]
snmp-agent usm-user { v1 | v2c } user-name group-name [ acl acl-list ]
snmp-agent usm-user v3 user-name group-name [ authentication-mode
{ md5 | sha } auth-password ] [ privacy-mode des56 priv-password ] [ acl
acl-list ]
Chapter 3 Logon User ACL Control Configuration
Command
3-4