HP VPN Firewall Appliances Getting Started Guide

116
Telnet login control configuration example
Network requirements
Configure the firewall in Figure 76 to permit only incoming Telnet packets sourced from Host A and Host
B.
Figure 76 Network diagram
Configuration procedure
# Configure basic ACL 2000, and configure rule 1 to permit packets sourced from Host B, and rule 2 to
permit packets sourced from Host A.
<Sysname> system-view
[Sysname] acl number 2000 match-order config
[Sysname-acl-basic-2000] rule 1 permit source 10.110.100.52 0
[Sysname-acl-basic-2000] rule 2 permit source 10.110.100.46 0
[Sysname-acl-basic-2000] quit
# Reference ACL 2000 on user interfaces VTY 0 through VTY 4 so only Host A and Host B can Telnet to
the firewall.
[Sysname] user-interface vty 0 4
[Sysname-ui-vty0-4] acl 2000 inbound
Configuring source IP-based SNMP login control
Use a basic ACL (2000 to 2999) to control SNMP logins by source IP address. To access the requested
MIB view, an NMS must use a source IP address permitted by the ACL.
To configure source IP-based SNMP login control:
Ste
p
Command Remarks
1. Enter system view.
system-view N/A
2. Create a basic ACL and
enter its view, or enter the
view of an existing basic
ACL.
acl [ ipv6 ] number acl-number [ name name ]
[ match-order { config | auto } ]
By default, no basic
ACL exists.
Host B
10.110.100.52
Firewall
IP network
Host A
10.110.100.46