24
When user A (IP address: 192.168.1.26) telnets to the device, the connection is
established; when user B (IP address: 192.168.1.60) telnets to the device, the connection
failed, and the system prompt appears: %connection closed by remote host!
Example 2:
When the device accesses another device through Telnet, only the Telnet server with
the IP address of 192.168.1.41 can be accessed through this user interface; Telnet
servers with other IP addresses are not allowed to be accessed by this device.
<Sysname> system-view
[Sysname] acl number 3001
[Sysname-acl-adv-3001] rule permit tcp destination 192.168.1.41 0
[Sysname-acl-adv-3001] quit
[Sysname] user-interface vty 0 4
[Sysname-ui-vty0-4] acl 3001 outbound
[Sysname-ui-vty0-4] return
<Sysname>
When the device telnets to another device with the IP address of 192.168.1.46, the
connection fails, and the system prompt appears: %Can't access the host from this
terminal!; when the device telnets to another device with the IP address of
192.168.1.41, the connection is established, which equals logging in to the device with
the IP address of 192.168.1.41 directly.
Example 3:
When users access the wireless access point (AP) or access controller (AC) through
wireless AP by using the user interface VTY 0, the users’ call-in authority is restricted. Only
the wireless user with the SSID of Admin can access the device through VTY 0.
<Sysname> system-view
[Sysname] acl number 100
[Sysname-acl-wlan-100] rule permit ssid Admin
[Sysname-acl-wlan-100] quit
[Sysname] user-interface vty 0
[Sysname-ui-vty0] acl 100 inbound
authorization-attribute
Syntax
authorization-attribute { acl acl-number | callback-number callback-number | idle-cut
minute | level level | user-profile profile-name | vlan vlan-id | work-directory
directory-name } *
undo authorization-attribute { acl | callback-number | idle-cut | level | user-profile |
vlan | work-directory } *
To Next Page
Loading...
Need help?
General
