H3C S3100 8C SI - Controlling Network Management Users by Source Ip Addresses

Operation Manual – Login
H3C S3100 Series Ethernet Switches Chapter 7 User Control
7-4
7.2.5 Configuration Example
I. Network requirements
Only the Telnet users sourced from the IP address of 10.110.100.52 are permitted to
access the switch.
II. Network diagram
Switch
10.110.100.46
Host A
IP network
Host B
10.110.100.52
Figure 7-1 Network diagram for controlling Telnet users using ACLs
III. Configuration procedure
# Define a basic ACL.
<Sysname> system-view
[Sysname] acl number 2000
[Sysname-acl-basic-2000] rule 1 permit source 10.110.100.52 0
[Sysname-acl-basic-2000] quit
# Apply the ACL.
[Sysname] user-interface vty 0 4
[Sysname-ui-vty0-4] acl 2000 inbound
7.3 Controlling Network Management Users by Source IP
Addresses
You can manage an S3100 Ethernet switch through network management software.
Network management users can access switches through SNMP.
You need to perform the following two operations to control network management users
by source IP addresses.
z Defining an ACL
z Applying the ACL to control users accessing the switch through SNMP