3Com Switch 7750 Configuration Guide Guide

76 CHAPTER 7: USER CONTROL
Controlling Telnet Users
by Source and
Destination IP Addresses
Controlling Telnet users by source and destination IP addresses is achieved by
applying advanced ACLs, which are numbered from 3000 to 3999. Refer to the
ACL module for information about defining an ACL.
Controlling Network
Management Users by
Source IP Addresses
You can manage the Switch 7750 Family through network management software.
Network management users can access switches through SNMP.
You need to perform the following two operations to control network
management users by source IP addresses.
Apply the ACL to control
Telnet users by source IP
addresses
acl acl-number { inbound |
outbound }
Required
The inbound keyword
specifies to filter the users
trying to Telnet to the current
switch.
The outbound keyword
specifies to filter users trying
to Telnet to other switches
from the current switch.
Table 32 Control Telnet users by source IP addresses
Operation Command Description
Tabl e 33 Control Telnet users by source and destination IP addresses
Operation Command Description
Enter system view system-view -
Create an advanced ACL or
enter advanced ACL view
acl { number acl-number |
name acl-name advanced } [
match-order { config | auto
} ]
As for the acl number
command, the config
keyword is specified by
default.
Define rules for the ACL
rule [ rule-id ] { permit | deny
} protocol [ source {
source-addr wildcard | any } ]
[ destination { dest-addr
dest-mask | any } ] [
source-port operator port1 [
port2 ] ] [ destination-port
operator port1 [ port2 ] ] [
icmp-type type code ] [
established ] [ [ precedence
precedence | tos tos ]* | dscp
dscp ] [ fragment ] [
time-range time-name ]
Required
You can define rules as
needed to filter by specific
source and destination IP
addresses.
Quit to system view quit -
Enter user interface view
user-interface [ type ]
first-number [ last-number ]
-
Apply the ACL to control
Telnet users by specified
source and destination IP
addresses
acl acl-number { inbound |
outbound }
Required
The inbound keyword
specifies to filter the users
trying to Telnet to the current
switch.
The outbound keyword
specifies to filter users trying
to Telnet to other switches
from the current switch.