Configuring Source Ip-Based Login Control Over Nms Users; Configuration Preparation - H3C S5500-HI Series Fundamentals Configuration Manual

[Sysname] user-interface vty 0 15
[Sysname-ui-vty0-15] acl 2000 inbound
Configuring source IP-based login control over
NMS users
You can log in to the NMS to remotely manage the devices. SNMP is used for communication between
the NMS and the agent that resides in the device. By using the ACL, you can control SNMP user access
to the device.

Configuration preparation

Before configuration, determine the permitted or denied source IP addresses.

Configuring source IP-based login control over NMS users

Basic ACLs match the source IP addresses of packets, so you can use basic ACLs to implement source
IP-based login control over NMS users. Basic ACLs are numbered from 2000 to 2999. For more
information about ACL, see ACL and QoS Configuration Guide.
Follow these steps to configure source IP-based login control over NMS users:
To do...
Enter system view
Create a basic ACL and enter its
view, or enter the view of an
existing basic ACL
Create rules for this ACL
Exit the basic ACL view
Use the command...
system-view
acl [ ipv6 ] number acl-number
[ match-order { config | auto } ]
rule [ rule-id ] { permit | deny }
[ source { sour-addr sour-wildcard |
any } | time-range time-name |
fragment | logging ]*
quit
79
Remarks
—
Required
By default, no basic ACL exists.
Required
—