H3C S5100-SI

9-6
To do… Use the command… Remarks
Create a basic ACL or enter
basic ACL view
acl number acl-number
[ match-order { config | auto } ]
As for the acl number
command, the config keyword
is specified by default.
Define rules for the ACL
rule [ rule-id ] { deny | permit }
[ rule-string ]
Required
Quit to system view
quit
—
Apply the ACL to control
Web users
ip http acl acl-number
Optional
By default, no ACL is applied
for Web users.
Logging Out a Web User
The administrator can log out a Web user using the related command.
Follow the step below to log out a Web user:
To do… Use the command… Remarks
Log out a Web user
free web-users { all | user-id user-id |
user-name user-name }
Required
Available in user view
Configuration Example
Network requirements
Only the Web users sourced from the IP address of 10.110.100.52 are permitted to access the
switch.
Network diagram
Switch
10.110.100.46
Host A
IP network
Host B
10.110.100.52
Figure 9-3 Network diagram for controlling Web users using ACLs
Configuration procedure
# Define a basic ACL.
<Sysname> system-view
[Sysname] acl number 2030
[Sysname-acl-basic-2030] rule 1 permit source 10.110.100.52 0
[Sysname-acl-basic-2030] quit