R3204P16-HP Load Balancing Module System Management Command Reference-6PW101

74
User management commands
acl (user interface view)
Syntax
• To use a basic or advanced ACL:
acl acl-number { inbound | outbound }
undo acl acl-number { inbound | outbound }
• To use an Ethernet frame header ACL:
acl acl-number inbound
undo acl acl-number inbound
View
VTY user interface view
Default level
2: System level
Parameters
acl-number: Number of the access control list (ACL).Supported ACL number ranges are as follows:
• Basic ACL: 2000 to 2999
• Advanced ACL: 3000 to 3999
• Ethernet frame header ACL: 4000 to 4999
inbound: Restricts Telnet or SSH connections established in the inbound direction through the VTY user
interface. If the received packets for establishing a Telnet or SSH connection are permitted by an ACL rule,
the connection is allowed to be established. When the LB module functions as a Telnet server or SSH
server, this keyword is used to control access of Telnet clients or SSH clients.
outbound: Restricts Telnet connections established in the outbound direction through the VTY user
interface. If the packets sent for establishing a Telnet connection are permitted by an ACL rule, the
connection is allowed to be established. When the LB module functions as a Telnet client, this keyword
is used to define Telnet servers accessible to the client.
Description
Use the acl command to reference ACLs to control access to the VTY user interface.
Use the undo acl command to cancel the ACL application. For more information about ACL, see Security
Configuration Guide.
By default, access to the VTY user interface is not restricted.
• If no ACL is referenced in VTY user interface view, the VTY user interface has no access control over
establishing a Telnet or SSH connection.
• If an ACL is referenced in VTY user interface view, the connection is permitted to be established
only when packets for establishing a Telnet or SSH connection match a permit statement in the ACL.