Configure Acl Control Over The Telnet User - 3Com 7700 Configuration Manual

Configure ACL Control
over the TELNET User
At the first level, the user connection is controlled with an ACL filter and only legal
users can be connected to the switch. At the second level, a connected user can
log on to the device only if the user can pass the password authentication.
This chapter introduces how to configure the first level security control to filter the
logon users with ACL. For the information about how to configure the first level
security, refer to "System Access".
Configuring ACL control over the TELNET users can help filter the malicious and
illegal connection requests before the password authentication and ensure the
device security.
The steps to control TELNET users with ACL are described in the following
sections:
Define ACL
■
Call ACL to Control TELNET Users
■
Define ACL
To implement the ACL control function, you can only call the numbered basic ACL,
ranging from 1 to 99.
Perform the following configuration in system view.
Table 18 Define Basic ACL
Operation
Enter basic ACL view(from system
view)
Add a sub-item to the ACL(from
basic ACL view)
Delete a sub-item from the
ACL(from basic ACL view)
Delete one ACL or all the ACL(from
system view)
In the defining process, you can configure several rules for an ACL, using the rule
command repeatedly.
Call ACL to Control TELNET Users
To control TELNET users with ACL, you can call the defined ACL in user-interface
view.
You can use the following command to call an ACL.
Perform the following configuration in the designated view.
Table 19 Call ACL to Control TELNET Users
Operation
Enter user-interface view (from
system view)
User LogonACL Control Configuration
Command
acl { number acl-number | name acl-name basic ip } [
match-order { config | auto } ]
rule [ rule-id ] { permit | deny } [ source source-addr
source-wildcard | any ] [ fragment ] [ time-range name
]
undo rule rule-id [ source ] [ fragment ] [ time-range ]
undo acl { number acl-number | name acl-name | all }
Command
user-interface [ type ] first-number [ last-number ]
155