3com 5500-SI Manual De Usuario

Descargar
Página de 686
Configuring Control Over Telnet 389
Controlling Telnet using
Source IP
This configuration can be implemented by means of basic ACL, which ranges from 
2000 to 2999.
Controlling Telnet using
Source IP and
Destination IP
This configuration can be implemented by means of advanced ACL, which ranges 
from 3000 to 3999. For the definition of ACL, refer to ACL part.
Table 409   Control Telnet using source IP
Configuration Procedure
Command
Description
Enter system view
system-view
Create or enter basic ACL 
view
acl number acl-number 
match-order { config | auto } 
]
By default, the matching order is 
config.
Define the rule
rule [ rule-id ] { permit | deny 
} [ source { sour-addr 
sour-wildcard
 | any } ] [ 
time-range time-name ] [ 
fragment ]
Required.
Exit ACL view
quit
Enter user interface view
user-interface [ type ] 
first-number [ last-number ]
Reference an ACL, and 
control Telnet using source IP
acl acl-number { inbound | 
outbound }
Required.
inbound: Performs ACL control 
over users Telnetting to the local 
switch.
outbound: Performs ACL control 
over users Telnetting to other 
switches from the local switch.
Table 410   Control Telnet using source IP and destination IP
Configuration Procedure Command
Description
Enter system view
system-view
Create or enter advanced 
ACL view
acl number acl-number 
match-order { config auto } ]
By default, the matching order 
is config.
Define the rule
rule [ rule-id ] { permit | deny } 
protocol [ source { source-addr 
wildcard
 | any } ] [ destination { 
dest-addr wildcard | any } ] [ 
source-port operator port1 [ 
port2 ] ] [ destination-port 
operator port1
 [ port2 ] ] [ 
icmp-type type code ] [ 
established ] [ [ { precedence 
precedence tos tos | dscp dscp 
}* | vpn-instance instance ] 
fragment | time-range name ]*
Required.
Users can configure the 
filtering rules for the related 
source IP and destination IP 
based on actual requirements.
Exit ACL view
quit
Enter user interface view
user-interface [ type ] 
first-number [ last-number ]
Refer to ACL, and control 
Telnet using source IP and 
destination IP
acl acl-number inbound | 
outbound }
Required.
Inbound: Performs ACL 
control over users Telnetting 
from the local switch.
outbound: Performs ACL 
control over users Telnetting 
to other switches from the 
local switch.