H3C S7500E Series Ethernet Switches Operation Manual

Operation Manual – Login
H3C S7500E Series Ethernet Switches Chapter 7 Controlling Login Users
7-3
To do… Use the command… Remarks
Apply the ACL to control
Telnet users by specified
source and destination IP
addresses
acl [ ipv6 ] acl-number
{ inbound | outbound }
Required
The inbound keyword
specifies to filter the users
trying to Telnet to the
current switch.
The outbound keyword
specifies to filter users
trying to Telnet to other
switches from the current
switch.
7.2.4 Controlling Telnet Users by Source MAC Addresses
Follow these steps to control Telnet users by source MAC addresses:
To do… Use the command… Remarks
Enter system view
system-view
—
Create a basic ACL or
enter basic ACL view
acl number acl-number
[ match-order { config |
auto } ]
As for the acl number
command, the config
keyword is specified by
default.
Define rules for the ACL
rule [ rule-id ] { permit |
deny } rule-string
Required
You can define rules as
needed to filter by specific
source MAC addresses.
Quit to system view
quit
—
Enter user interface view
user-interface [ type ]
first-number
[ last-number ]
—
Apply the ACL to control
Telnet users by source
MAC addresses
acl acl-number inbound
Required
The inbound keyword
specifies to filter the users
trying to Telnet to the
current switch.
7.2.5 Configuration Example
I. Network requirements
Only the Telnet users sourced from the IP address of 10.110.100.52 and 10.110.100.46
are permitted to log into the switch.