150 CHAPTER 7: ACL CONFIGURATION
Figure 42 ACL Control Over SNMP Users of the Switch
Configuration Steps
# Define basic ACLs and rules.
<4500>system-view
System View: return to User View with Ctrl+Z.
[4500] acl number 2000 match-order config
[4500-acl-basic-2000] rule 1 permit source 10.110.100.52 0
[4500-acl-basic-2000] rule 2 permit source 10.110.100.46 0
[4500-acl-basic-2000] rule 3 deny source any
[4500-acl-basic-2000] quit
# Use ACLs.
[4500] snmp-agent community read huawei acl 2000
[4500] snmp-agent group v3 huaweigroup acl 2000
[4500] snmp-agent usm-user v3 huaweiuser huaweigroup acl 2000
Configuring ACL Control
for HTTP Users
The Switch 4500 Family supports the remote management through the Web
interface. The users can access the Switch through HTTP. Controlling such users
with ACL can help filter the illegal users and prevent them from accessing the local
Switch. After configuring ACL control over these users, the Switch allows only one
Web user to access the Ethernet Switch at one time.
Take the following steps to control the HTTP users with ACL.
1 Defining ACL
2 Calling ACL to control HTTP users
The follow section introduces the configuration procedures.
Defining ACL
You can only call the numbered basic ACL, ranging from 2000 to 2999, to
implement ACL control function. Use the same configuration commands
introduced in the last section.