HP A8800 Series Fundamentals Command Reference page 25

acl acl-number inbound
undo acl acl-number inbound
View
VTY user interface view
Default level
2: System level
Parameters
ipv6: When this keyword is present, the command supports IPv6; otherwise, it supports IPv4.
acl-number: Number of the ACL:
Basic ACL—2000 to 2999.
•
Advanced ACL—3000 to 3999.
•
• Ethernet frame header ACL—4000 to 4999.
inbound: Restricts Telnet or SSH connections established in the inbound direction through the VTY user
interface. If the received packets for establishing a Telnet or SSH connection are permitted by an ACL rule,
the connection is allowed to be established. When the device functions as a Telnet server or SSH server,
this keyword is used to control access of Telnet clients or SSH clients.
outbound: Restricts Telnet connections established in the outbound direction through the VTY user
interface. If the packets sent for establishing a Telnet connection are permitted by an ACL rule, the
connection is allowed to be established. When the device functions as a Telnet client, this keyword is
used to define Telnet servers accessible to the client.
Description
Use acl to reference ACLs to control access to the VTY user interface.
Use undo acl to cancel the ACL application. For more information about ACL, see ACL and QoS
Configuration Guide.
By default, access to the VTY user interface is not restricted.
If no ACL is referenced in VTY user interface view, the VTY user interface has no access control over
establishing a Telnet or SSH connection.
If an ACL is referenced in VTY user interface view, the connection is permitted to be established only
when packets for establishing a Telnet or SSH connection match a permit statement in the ACL.
The system regards the basic/advanced ACL with the inbound keyword, the basic/advanced ACL with
the outbound keyword, and Ethernet frame header ACL as three different types of ACLs, which can
coexist in one VTY user interface. The match order is basic/advanced ACL and Ethernet frame header
ACL. At most one ACL of each type can be referenced in the same VTY user interface, and the last
configured one takes effect.
Examples
# Allow only the user with the IP address of 192.168.1.26 to access the device through Telnet or SSH.
<Sysname> system-view
[Sysname] acl number 2001
[Sysname-acl-basic-2001] rule permit source 192.168.1.26 0
[Sysname-acl-basic-2001] quit
[Sysname] user-interface vty 0
[Sysname-ui-vty0] acl 2001 inbound
18