Syntax 
user access-control  ip-based  { 
ip-addr ip-mask 
}
 
[ snmp ] [ telnet ] [ ssh ] 
[ http ] [ https ] [ ping ] [ all ]
 
no user access-control
 
Parameter 
ip-addr 
——  The source IP address. Only the users within the IP-range you 
set here are allowed for login. 5 IP-based entries can be configured at most. 
ip-mask 
—— The subnet mask of the IP address. 
[ snmp ] [ telnet ] [ ssh ] [ http ] [ https ] [ ping ] [ all ] —— Specify the access 
interface. These interfaces are enabled by default. 
id 
—— Delete the specified IP-based entry. The index ranges from 1 to 5.
 
Command Mode 
Global Configuration Mode 
Privilege Requirement 
Only Admin and Operator level users have access to these commands. 
Example 
Enable the access-control of the user whose IP address is 192.168.0.148: 
T2500G-10TS(config)# user access-control ip-based  192.168.0.148 
255.255.255.255 
11.4  user access-control mac-based 
Description 
The  user access-control mac-based  command is used to limit the MAC 
address of the users for login. Only the user with this MAC address you set 
here is allowed to login. To cancel the user access limit, please use no user 
access-control command. 
Syntax 
user access-control mac-based { 
mac-addr 
}
 
[ snmp ] [ telnet ] [ ssh ] [ http ] 
[ https ] [ ping ] [ all ] 
no user access-control 
74