F3215-HP Load Balancing Module System Management Configuration Guide-6PW101

81
Figure 45 Network diagram
Configuration procedure
# Configure basic ACL 2000, and configure rule 1 to permit packets sourced from Host B, and rule 2 to
permit packets sourced from Host A.
<LB> system-view
[LB] acl number 2000 match-order config
[LB-acl-basic-2000] rule 1 permit source 10.110.100.52 0
[LB-acl-basic-2000] rule 2 permit source 10.110.100.46 0
[LB-acl-basic-2000] quit
# Reference ACL 2000 on user interfaces VTY 0 through VTY 4 so only Host A and Host B can Telnet to
LB.
[LB] user-interface vty 0 4
[LB-ui-vty0-4] acl 2000 inbound
Configuring source IP-based SNMP login control
Use a basic ACL (2000 to 2999) to control SNMP logins by source IP address. To access the requested
MIB view, an NMS must use a source IP address permitted by the ACL.
Configuration procedure
To configure source IP-based SNMP login control:
Ste
p
Command
Remarks
1. Enter system view.
system-view N/A
2. Create a basic ACL and
enter its view, or enter the
view of an existing basic
ACL.
acl [ ipv6 ] number acl-number [ name name ]
[ match-order { config | auto } ]
By default, no basic
ACL exists.
3. Configure an ACL rule.
rule [ rule-id ] { deny | permit } [ counting |
fragment | logging | source { sour-addr
sour-wildcard | any } | time-range
time-range-name | vpn-instance
vpn-instance-name ] *
N/A
4. Exit the basic ACL view.
quit N/A
Host B
10.110.100.52
LB
IP network
Host A
10.110.100.46