3com 8807 User Guide

Page of 883
212
C
HAPTER
 23: L
OGON
 U
SER
 ACL C
ONTROL
 C
ONFIGURATION
[SW8800] user-interface vty 0 4 
# Apply the Layer 2 ACL to restrict incoming requests.
[3Com-user-interface-vty0-4] acl 4000 inbound 
Basic ACL Control 
Configuration Example
Network requirements
Only the Telnet users with IP addresses of 10.110.100.52 and 10.110.100.46 can 
access the switch.
Network diagram
Figure 55   Network diagram for source IP control over Telnet users
Configuration procedure
# Define a basic ACL.
<SW8800>system-view
 
System View: return to User View with Ctrl+Z.
 
[SW8800] acl number 2000 match-order config 
# Define rules.
[3Com-acl-basic-2000] rule 1 permit source 10.110.100.52 0
 
[3Com-acl-basic-2000] rule 2 permit source 10.110.100.46 0
 
[3Com-acl-basic-2000] rule 3 deny source any
 
[3Com-acl-basic-2000] quit 
# Enter user interface view.
[SW8800] user-interface vty 0 4 
# Apply the ACL.
[3Com-user-interface-vty0-4] acl 2000 inbound 
Configuring ACL for 
SNMP Users
Switch 8800 Family series switches can be managed remotely through network 
management software (NMS). Administrators can use SNMP to access an Switch 
8800 Family series switch. Proper ACL configuration can prevent unauthorized 
network management users from logging onto the switch.
Configuration 
Prerequisites
You have correctly configured log into the switch using SNMP.
Internet
Switch