Using The Cli; Configuring The Access Control Feature - TP-Link T1600G-52TS User Manual

Configuring Access Security
2.2

Using the CLI

2.2.1 Configuring the Access Control Feature

Follow these steps to configure the access control:
Step 1 configure
Enter global configuration mode.
Step 2 ■ Use the following command to control the users' access by limiting the IP address:
user access-control ip-based enable
Configure the control mode as IP-based.
user access-control ip-based { ip-addr ip-mask } [ snmp ] [ telnet ] [ ssh ] [ http ] [ https ] [
ping ] [ all ]
Only the users within a certain IP-range can access the switch via the specified interfaces.
ip-addr
ip-mask
[ snmp ] [ telnet ] [ ssh ] [ http ] [ https ] [ ping ] [ all
Access Control rule. If an interface is unselected, all users can access the switch via it. By
default, all the interfaces are selected.
■ Use the following command to control the users' access by limiting the MAC address:
user access-control mac-based enable
Configure the control mode as MAC-based.
user access-control mac-based { mac-addr } [ snmp ] [ telnet ] [ ssh ] [ http ] [ https ] [ ping ] [
all ]
Only the users with a certain MAC address can access the switch via the specified interfaces.
mac-addr
[ snmp ] [ telnet ] [ ssh ] [ http ] [ https ] [ ping ] [ all
Access Control rule. If an interface is unselected, all users can access the switch via it. By
default, all the interfaces are selected.
■ Use the following command to control the users' access by limiting the ports connected to
the users:
user access-control port-based enable
Configure the control mode as Port-based.
user access-control port-based interface { fastEthernet port-list | gigabitEthernet port-list
| ten-gigabitEthernet port-list } [ snmp ] [ telnet ] [ ssh ] [ http ] [ https ] [ ping ] [ all ]
Only the users who are connected to certain ports can access the switch via the specified
interfaces.
port-list
most.
[ snmp ] [ telnet ] [ ssh ] [ http ] [ https ] [ ping ] [ all
Access Control rule. If an interface is unselected, all users can access the switch via it. By
default, all the interfaces are selected.
: Specify the IP address of the user.
: Specify the subnet mask of the user.
: Specify the MAC address of the user.
: Specify the list of Ethernet port, in the format of 1/0/1-4. You can appoint 5 ports at
Access Security Configurations
]: Select the interfaces where to apply the
]: Select the interfaces where to apply the
]: Select the interfaces where to apply the
User Guide 596