UTStarcom iSpirit 3026 Manual page 162

BY using ACL to ensure device safety if the management service of switch is started. Which is
mainly realized based on communications between supplicant and service ends, to make
identification for users' management information. For above three kinds of ways to judge that if
the administrator has started with relative services, if it is started judge that if it has configured
with ACL, and then make judgement for resource IP address based on ACL regulation. If
resource IP address can be visited the service management switch can be used, but if resource
IP address canot be visited the service management switch cannot be used.
Before using ACL ACL regulation in ACL resource bank should be configured, management
service choose ACL regulation in ACL resource bank, and one management service can only
choose one standard IP regulation group.
Please refer to Figure 15-1 that is an example for management service control, suppose that
user 1 and user 2 know of switch's name and password. If TELNET service is started, user 1 and
user 2 can manage the switch through TELNET service. If the WEB service is closed, user 1 and
user 2 cannot through WEB service manege the switch. If SNMP service is started, but one
standard IP regulation group in ACL resource bank is used, this regulation only permit source
address of 192.168.0.100 to be passed, only user 1 can manage the switch through SNMP
service, but user 2 cannot manage the switch through SNMP service.
Figure 15-1 Device Management Service Control