R3721-F3210-F3171-HP High-End Firewalls Getting Started Guide-6PW101

95
Ste
p
Command Remarks
5. Associate the HTTP service
with the ACL.
ip http acl acl-number
Use one command.
For more information, see Getting
Started Command Reference.
6. Associate the HTTPS service
with the ACL.
ip https acl acl-number
Logging off online Web users
To log off online Web users:
Task Command Remarks
Log off online Web users.
free web-users { all | user-id
user-id | user-name user-name }
Execute the command in user interface
view.
Source IP-based Web login control configuration example (at
the CLI)
Network requirements
As shown in Figure 59, configure Firewall to allow only Web users from Host B to access.
Figure 59 Network diagram
Configuration procedure
# Create ACL 2000, and configure rule 1 to permit packets sourced from Host B.
<Sysname> system-view
[Sysname] acl number 2030 match-order config
[Sysname-acl-basic-2030] rule 1 permit source 10.110.100.52 0
# Associate the ACL with the HTTP service so that only Web users from Host B are allowed to access
Firewall.
[Sysname] ip http acl 2030
Displaying online users
The firewall supports configuring user login control only in the Web interface.
Online users here refer to the users getting online after passing AAA authentication.
IP network
Firewall
Host B
10.110.100.52
Host A
10.110.100.46