R3204P16-HP Load Balancing Module System Management Configuration Guide-6PW101

84
Source IP-based login control over NMS users configuration
example
Network requirements
As shown in Figure 47, configure the LB module to allow only NMS users from Host A and Host B to
access.
Figure 47 Network diagram for configuring source IP-based login control over NMS users
Configuration procedure
# Create ACL 2000, and configure rule 1 to permit packets sourced from Host B, and rule 2 to permit
packets sourced from Host A.
<Sysname> system-view
[Sysname] acl number 2000 match-order config
[Sysname-acl-basic-2000] rule 1 permit source 10.110.100.52 0
[Sysname-acl-basic-2000] rule 2 permit source 10.110.100.46 0
[Sysname-acl-basic-2000] quit
# Associate the ACL with the SNMP community and the SNMP group.
[Sysname] snmp-agent community read aaa acl 2000
[Sysname] snmp-agent group v2c groupa acl 2000
[Sysname] snmp-agent usm-user v2c usera groupa acl 2000
Configuring source IP-based login control over web
users
Administrators can log in to the web management page of the LB module through HTTP/HTTPS to
remotely manage the module. By using an ACL, you can control web user access to the module.
Configuration preparation
Before configuration, determine the permitted or denied source IP addresses.