45
Configure the device to permit only Telnet packets sourced from Host A and Host B.
Figure 16 Network diagram
Configuration procedure
# Configure an ACL to permit packets sourced from Host A and Host B.
<Sysname> system-view
[Sysname] acl number 2000 match-order config
[Sysname-acl-basic-2000] rule 1 permit source 10.110.100.52 0
[Sysname-acl-basic-2000] rule 2 permit source 10.110.100.46 0
[Sysname-acl-basic-2000] quit
# Apply the ACL to filter Telnet logins.
[Sysname] telnet server acl 2000
Controlling Web logins
Use a basic ACL (2000 to 2999) to filter HTTP/HTTPS traffic by source IP address. Only Web users
whose IP addresses are permitted by the ACL can access the device. For more information about
ACL, see ACL and QoS Configuration Guide.
You can also log off suspicious Web users.
Configuring source IP-based Web login control
Step Command
1. Enter system view.
system-view
2. Associate a basic ACL with the Web service.
• Control HTTP logins:
ip http acl acl-number
• Control HTTPS logins:
ip https acl acl-number
Logging off online Web users
To log off online Web users, execute the following command in user view: