60 CHAPTER 2: LOGGING INTO AN ETHERNET SWITCH
User Control
n
Refer to“Password Control Configuration Operations” on page 555 for
information about the ACL.
A switch provides ways to control different types of login users, as listed in
Table 29.
Controlling Telnet Users Prerequisites
The controlling policy against Telnet users is determined, including the source IP
addresses, destination IP addresses and source MAC addresses to be controlled
and the controlling actions (permitting or denying).
Controlling Telnet Users by Source IP Addresses
Controlling Telnet users by source IP addresses is achieved by applying basic ACLs,
which are numbered from 2000 to 2999.
Tabl e 29 Ways to control different types of login users
Login
mode
Control method Implementation Related section
Telnet By source IP
address
Through basic ACL “Controlling Telnet Users by Source IP
Addresses”.
By source and
destination IP
address
Through advanced
ACL
“Controlling Telnet Users by Source
and Destination IP Addresses”.
By source MAC
address
Through Layer 2
ACL
“Controlling Telnet Users by Source
MAC Addresses”
SNMP By source IP
addresses
Through basic ACL “Controlling Network Management
Users by Source IP Addresses”.
WEB By source IP
addresses
Through basic ACL “Controlling Web Users by Source IP
Address”.
Disconnect Web
users by force
By executing
commands in CLI
“Disconnecting a Web User by Force”.
Tabl e 30 Control Telnet users by source IP addresses
Operation Command Description
Enter system view system-view -
Create a basic ACL or
enter basic ACL view
acl number acl-number [
match-order { config | auto } ]
As for the acl number command,
the config keyword is specified by
default.
Define rules for the
ACL
rule [ rule-id ] { deny | permit } [
rule-string ]
Required
Quit to system view quit -
Enter user interface
view
user-interface [ type ]
first-number [ last-number ]
-
To Next Page
Loading...
