Controlling Telnet Users; Controlling Telnet Users By Source Ip Addresses; Controlling Telnet Users By Source And Destination Ip Addresses - H3C S5600 Series Operation Manual

Operation Manual – Login
H3C S5600 Series Ethernet Switches

8.2 Controlling Telnet Users

8.2.1 Prerequisites
The controlling policy against Telnet users is determined, including the source IP
addresses, destination IP addresses and source MAC addresses to be controlled and
the controlling actions (permitting or denying).

8.2.2 Controlling Telnet Users by Source IP Addresses

Controlling Telnet users by source IP addresses is achieved by applying basic ACLs,
which are numbered from 2000 to 2999.
Follow these steps to control Telnet users by source IP addresses:
Enter system view
Create a basic ACL or
enter basic ACL view
Define rules for the
ACL
Quit to system view
Enter user interface
view
Apply the ACL to
control Telnet users by
source IP addresses

8.2.3 Controlling Telnet Users by Source and Destination IP Addresses

Controlling Telnet users by source and destination IP addresses is achieved by
applying advanced ACLs, which are numbered from 3000 to 3999.
Follow these steps to control Telnet users by source and destination IP addresses:
To do... Use the command...
system-view
acl number acl-number
[ match-order { auto |
config } ]
rule [ rule-id ] { deny |
permit } [ rule-string ]
quit
user-interface [ type ]
first-number
[ last-number ]
acl acl-number
{ inbound | outbound }
—
As for the acl number
command, the config keyword
is specified by default.
Required
—
—
Required
The inbound keyword
specifies to filter the users
trying to Telnet to the current
switch.
The outbound keyword
specifies to filter users trying to
Telnet to other switches from
the current switch.
8-2
Chapter 8 User Control
Remarks