Controlling Network Management Users By Source Ip Addresses - H3C S5600 Series Operation Manual

Operation Manual – Login
H3C S5600 Series Ethernet Switches
Apply the ACL to
control Telnet users by
specified source MAC
addresses
8.2.5 Configuration Example
I. Network requirements
Only the Telnet users sourced from the IP address of 10.110.100.52 are permitted to
access the switch.
II. Network diagram
10.110.100.46
Host A
Host B
10.110.100.52
Figure 8-1 Network diagram for controlling Telnet users using ACLs
III. Configuration procedure
# Define a basic ACL.
<Sysname> system-view
[Sysname] acl number 2000
[Sysname-acl-basic-2000] rule 1 permit source 10.110.100.52 0
[Sysname-acl-basic-2000] quit
# Apply the ACL.
[Sysname] user-interface vty 0 4
[Sysname-ui-vty0-4] acl 2000 inbound
8.3 Controlling Network Management Users by Source IP
Addresses
You can manage an S5600 Ethernet switch through network management software.
Network management users can access switches through SNMP.
To do...
acl acl-number inbound
IP network
Use the command...
Switch
8-4
Chapter 8 User Control
Remarks
Required
By default, no ACL is
applied for Telnet users.