To do...
Use the ACL to control user login
by source IP address
Configuring source and destination IP-based login control over
Telnet users
Advanced ACLs can match both source and destination IP addresses of packets, so you can use
advanced ACLs to implement source and destination IP-based login control over Telnet users. Advanced
ACLs are numbered from 3000 to 3999. For more information about ACL, see ACL and QoS
Configuration Guide.
Follow these steps to configure source and destination IP-based login control over Telnet users:
To do...
Enter system view
Create an advanced ACL and
enter its view, or enter the view of
an existing advanced ACL
Configure rules for the ACL
Exit advanced ACL view
Enter user interface
Use the ACL to control user login
by source and destination IP
addresses
Configuring source MAC-based login control over Telnet users
Ethernet frame header ACLs can match the source MAC addresses of packets, so you can use Ethernet
frame header ACLs to implement source MAC-based login control over Telnet users. Ethernet frame
header ACLs are numbered from 4000 to 4999. For more information about ACL, see ACL and QoS
Configuration Guide.
Follow these steps to configure source MAC-based login control over Telnet users:
To do...
Enter system view
Create an Ethernet frame header
ACL and enter its view
Use the command...
acl [ ipv6 ] acl-number { inbound |
outbound }
Use the command...
system-view
acl [ ipv6 ] number acl-number
[ match-order { config | auto } ]
rule [ rule-id ] { permit | deny }
rule-string
quit
user-interface [ type ] first-number
[ last-number ]
acl [ ipv6 ] acl-number { inbound |
outbound }
Use the command...
system-view
acl number acl-number
[ match-order { config | auto } ]
69
Remarks
Required
inbound: Filters incoming Telnet
packets.
outbound: Filters outgoing Telnet
packets.
Remarks
—
Required
By default, no advanced ACL
exists.
Required
—
—
Required
inbound: Filters incoming Telnet
packets.
outbound: Filters outgoing Telnet
packets.
Remarks
—
Required
By default, no Ethernet frame
header ACL exists.