298 CHAPTER 27: ACL CONFIGURATION
Configuration procedure
# Define ACL 2000.
<4210> system-view
[4210] acl number 2000
[4210-acl-basic-2000] rule 1 permit source 10.110.100.52 0
[4210-acl-basic-2000] quit
# Reference ACL 2000 on VTY user interface to control Telnet login users.
[4210] user-interface vty 0 4
[4210-ui-vty0-4] acl 2000 inbound
Example for Controlling
Web Login Users by
Source IP
Network requirements
Apply an ACL to permit Web users with the source IP address of 10.110.100.46 to
log in to the switch through HTTP.
Network diagram
Figure 91 Network diagram for controlling Web login users by source IP
Configuration procedure
# Define ACL 2001.
<4210> system-view
[4210] acl number 2001
[4210-acl-basic-2001] rule 1 permit source 10.110.100.46 0
[4210-acl-basic-2001] quit
# Reference ACL 2001 to control users logging in to the Web server.
[4210] ip http acl 2001
Switch
PC
10.110.100.46
Internet