8-6 
To do…  Use the command…  Remarks 
Enter system view 
system-view 
— 
Create a basic ACL or enter 
basic ACL view 
acl number acl-number 
[ match-order { config | auto } ] 
As for the acl number 
command, the config keyword 
is specified by default. 
Define rules for the ACL 
rule [ rule-id ] { deny | permit } 
[ rule-string ] 
Required 
Quit to system view 
quit 
— 
Apply the ACL to control 
Web users 
ip http acl acl-number 
Optional 
By default, no ACL is applied 
for Web users.  
 
Logging Out a Web User 
The administrator can log out a Web user using the related command. 
Follow the step below to log out a Web user: 
To do…  Use the command…  Remarks 
Log out a Web user 
free web-users { all | user-id user-id | 
user-name user-name } 
Required 
Available in user view 
 
Configuration Example 
Network requirements 
Only the Web users sourced from the IP address of 10.110.100.52 are permitted to access the switch. 
Network diagram 
Figure 8-3 Network diagram for controlling Web users using ACLs 
Switch
10.110.100.46
Host A
IP network
Host B
10.110.100.52
 
 
Configuration procedure 
# Define a basic ACL. 
<Sysname> system-view 
[Sysname] acl number 2030 
[Sysname-acl-basic-2030] rule 1 permit source 10.110.100.52 0