HP 5120 series User Manual

76
Configuring source IP-based login control over telnet users
Because basic ACLs match the source IP addresses of packets, you can use basic ACLs to implement
source IP-based login control over telnet users. Basic ACLs are numbered from 2000 to 2999. For more
information about ACL, see the ACL and QoS Configuration Guide.
Follow these steps to configure source IP-based login control over telnet users:
To do… Use the command…
Remarks
Enter system view system-view —
Create a basic ACL and enter its
view, or enter the view of an
existing basic ACL
acl [ ipv6 ] number acl-number
[ match-order { config | auto } ]
Required
By default, no basic ACL exists.
Configure rules for this ACL
rule [ rule-id ] { permit | deny }
[ source { sour-addr sour-wildcard
| any } | time-range time-name |
fragment | logging ]*
Required
Exit the basic ACL view quit —
Enter user interface view
user-interface [ type ] first-number
[ last-number ]
—
Use the ACL to control user login
by source IP address
acl [ ipv6 ] acl-number { inbound |
outbound }
Required
inbound: Filters incoming telnet
packets.
outbound: Filters outgoing telnet
packets.
Configuring source and destination IP-based login control over
telnet users
Because advanced ACLs can match both source and destination IP addresses of packets, you can use
advanced ACLs to implement source and destination IP-based login control over telnet users. Advanced
ACLs are numbered from 3000 to 3999. For more information about ACL, see the ACL and QoS
Configuration Guide.
Follow these steps to configure source and destination IP-based login control over telnet users:
To do… Use the command…
Remarks
Enter system view system-view —
Create an advanced ACL
and enter its view, or enter
the view of an existing
advanced ACL
acl [ ipv6 ] number acl-number
[ match-order { config | auto } ]
Required
By default, no advanced ACL
exists.
Configure rules for the ACL rule [ rule-id ] { permit | deny } rule-string Required
Exit advanced ACL view quit —
Enter user interface
user-interface [ type ] first-number
[ last-number ]
—

HP 5120 series Specifications

General

MAC address table size	16K entries
Product Series	HP 5120 series
Layer	Layer 3
Power over Ethernet (PoE)	Available on some models
Switching Capacity	128 Gbps
Management	CLI, Web, SNMP
Dimensions (W x D x H)	440 x 360 x 44 mm
Weight	5.5 kg
Routing Protocol	Static, RIP, OSPF, BGP
Features	ACLs
Jumbo Frame Support	Yes
Operating Temperature	0°C to 45°C
Operating Humidity	10% to 90% non-condensing
VLANs	4094

Summary

CLI Configuration and Management

Entering and Navigating the CLI

Typing, Editing, and History

User Privilege and Command Levels

Explains user privilege levels and how they restrict command access.

Saving and Maintaining Configuration Files

Covers saving the running configuration and managing configuration files.

Login Methods and Access Control

Console Port Login Configuration

Details configuration for console login, including authentication modes.

Telnet Login Configuration

Explains how to configure Telnet access, including authentication.

SSH Login Configuration

Details configuring secure SSH access, including server and client setup.

Modem Login Configuration

Web Login Configuration

Covers enabling and configuring HTTP and HTTPS access to the device.

NMS Login Configuration

File Transfer and Management

FTP Configuration

TFTP Configuration

Managing Files and Directories

File Operations

Configuration File Management

Covers overview, saving, rollback, and managing startup configuration files.

Software Management

Software Upgrade Methods

Outlines different methods for upgrading device software and hotfixes.

Upgrading Boot ROM and Boot Files

Installing Hotfixes