Operation Manual – Login
H3C S3100 Series Ethernet Switches Chapter 7 User Control
7-2
7.2.2 Controlling Telnet Users by Source IP Addresses
Controlling Telnet users by source IP addresses is achieved by applying basic ACLs,
which are numbered from 2000 to 2999.
Table 7-2 Control Telnet users by source IP addresses
Operation Command Description
Enter system view
system-view
—
Create a basic ACL
or enter basic ACL
view
acl number acl-number
[ match-order { config |
auto } ]
As for the acl number
command, the config
keyword is specified by
default.
Define rules for the
ACL
rule [ rule-id ] { deny |
permit } [ rule-string ]
Required
Quit to system view
quit
—
Enter user
interface view
user-interface [ type ]
first-number [ last-number ]
—
Apply the ACL to
control Telnet
users by source IP
addresses
acl acl-number { inbound |
outbound }
Required
The inbound keyword
specifies to filter the users
trying to Telnet to the current
switch.
The outbound keyword
specifies to filter users trying
to Telnet to other switches
from the current switch.
7.2.3 Controlling Telnet Users by Source and Destination IP Addresses
Controlling Telnet users by source and destination IP addresses is achieved by
applying advanced ACLs, which are numbered from 3000 to 3999.
Table 7-3 Control Telnet users by source and destination IP addresses
Operation Command Description
Enter system view
system-view
—
Create an
advanced ACL or
enter advanced
ACL view
acl number acl-number
[ match-order { config |
auto } ]
As for the acl number command,
the config keyword is specified by
default.
Define rules for the
ACL
rule [ rule-id ] { deny |
permit } protocol
[ rule-string ]
Required
You can define rules as needed to
filter by specific source and
destination IP addresses.