81
To do… Use the command…
Remarks
Create a basic ACL and enter its
view, or enter the view of an
existing basic ACL
acl [ ipv6 ] number acl-number
[ match-order { config | auto } ]
Required
By default, no basic ACL exists.
Create rules for this ACL
rule [ rule-id ] { permit | deny }
[ source { sour-addr sour-wildcard
| any } | time-range time-name |
fragment | logging ]*
Required
Exit the basic ACL view
quit —
Associate the HTTP service with the
ACL
ip http acl acl-number
Required to use one command.
HTTP is not supported in FIPS
mode.
Associate the HTTPS service with
the ACL
ip https acl acl-number
Logging off online web users
Follow the step to log off online web users:
To do… Use the command…
Remarks
Log off online web users
free web-users { all | user-id
user-id | user-name user-name }
Required
Execute the command in user
interface view.
Source IP-based login control over web users configuration
example
Network requirements
As shown in Figure 25, configure the device to allow only HTTPS users from Host B to access.
Figure 25 Network diagram for configuring source IP-based login control
Configuration procedure
# Create ACL 2000, and configure rule 1 to permit packets sourced from Host B.
<Sysname> system-view