H3C S3100 8C SI - Example for Upper-Layer Software Referencing Acls; Example for Controlling Telnet Login Users by Source IP; Example for Controlling Web Login Users by Source IP

Operation Manual – ACL
H3C S3100 Series Ethernet Switches Chapter 1 ACL Configuration
1-14
1.5 Example for Upper-layer Software Referencing ACLs
1.5.1 Example for Controlling Telnet Login Users by Source IP
I. Network requirements
Apply an ACL to permit users with the source IP address of 10.110.100.52 to telnet to
the switch.
II. Network diagram
Switch
PC
10.110.100.52
Internet
Figure 1-1 Network diagram for controlling Telnet login users by source IP
III. Configuration procedure
# Define ACL 2000.
<Sysname> system-view
[Sysname] acl number 2000
[Sysname-acl-basic-2000] rule 1 permit source 10.110.100.52 0
[Sysname-acl-basic-2000] quit
# Reference ACL 2000 on VTY user interface to control Telnet login users.
[Sysname] user-interface vty 0 4
[Sysname-ui-vty0-4] acl 2000 inbound
1.5.2 Example for Controlling Web Login Users by Source IP
I. Network requirements
Apply an ACL to permit Web users with the source IP address of 10.110.100.46 to log in
to the switch through HTTP.