Controlling Telnet Users By Source Mac Addresses - Huawei Quidway S3900 Series Operation Manual

Operation Manual – Login
Quidway S3900 Series Ethernet Switches-Release 1510
Operation
Define rules for the
ACL
Quit to
view
Enter
interface view
Apply the ACL to
control
users by specified
source
destination
addresses

8.2.4 Controlling Telnet Users by Source MAC Addresses

Controlling Telnet users by source MAC addresses is achieved by applying Layer 2
ACLs, which are numbered from 4000 to 4999. Refer to the ACL module for information
about defining an ACL.
Table 8-4 Control Telnet users by source MAC addresses
Operation
Enter system view
Create
Layer 2 ACL view
Command
rule [ rule-id ] { permit |
deny } protocol [ source
{ source-addr wildcard |
any }
{ dest-addr wildcard | any } ]
[ source-port operator port1
[ port2 ] ] [ destination-port
operator port1 [ port2 ] ]
[ icmp-type type code ]
[ established
[ { precedence precedence
tos tos | dscp dscp }* |
fragment
name ]*
system
quit
user user-interface
first-number [ last-number ]
Telnet
acl acl-number { inbound |
and outbound }
IP
Command
system-view
or enter
acl number acl-number
Huawei Technologies Proprietary
] [ destination
Required
You can define rules as
needed to filter by specific
source and destination IP
addresses.
]
| time-range
—
[ type ]
—
Required
The
specifies to filter the users
trying to Telnet to the current
switch.
The
specifies to filter users trying
to Telnet to other switches
from the current switch.
—
—
8-3
Chapter 8 User Control
Description
inbound keyword
outbound keyword
Description