R3303-HP 6600/HSR6600 Routers Fundamentals Configuration Guide

72
Telnet login control configuration example
Network requirements
Configure the router in Figure 38 to permit only incoming Telnet packets sourced from Host A and Host
B.
Figure 38 Network diagram
Configuration procedure
# Configure basic ACL 2000, and configure rule 1 to permit packets sourced from Host B, and rule 2 to
permit packets sourced from Host A.
<Router> system-view
[Router] acl number 2000 match-order config
[Router-acl-basic-2000] rule 1 permit source 10.110.100.52 0
[Router-acl-basic-2000] rule 2 permit source 10.110.100.46 0
[Router-acl-basic-2000] quit
# Reference ACL 2000 on user interfaces VTY 0 through VTY 4 so only Host A and Host B can Telnet to
the router.
[Router] user-interface vty 0 4
[Router-ui-vty0-4] acl 2000 inbound
Configuring source IP-based SNMP login control
Use a basic ACL (2000 to 2999) to control SNMP logins by source IP address. To access the requested
MIB view, an NMS must use a source IP address permitted by the ACL.
Configuration procedure
To configure source IP-based SNMP login control:
Ste
p
Command Remarks
1. Enter system view.
system-view N/A
Host B
10.110.100.52
Router
IP network
Host A
10.110.100.46