77
User login control
Overview
The device provides the following login control methods.
Login Through Login control methods ACL used
Telnet
Configuring source IP-based login control over Telnet
users
Basic ACL
Configuring source and destination IP-based login
control over Telnet users
Advanced ACL
Configuring source MAC-based login control over
Telnet users
Ethernet frame header ACL
NMS
Configuring source IP-based login co
ntrol over NMS
users
Basic ACL
Web
Configuring source IP-based login co
ntrol over web
users
Basic ACL
Configuring login control over Telnet users
Configuration preparation
Before configuration, determine the permitted or denied source IP addresses, source MAC addresses, and
destination IP addresses.
Configuring source IP-based login control over Telnet users
Because basic ACLs match the source IP addresses of packets, use basic ACLs to implement source IP-based
login control over Telnet users. Basic ACLs are numbered from 2000 to 2999. For more information about
ACL, see ACL and QoS Configuration Guide.
To configure source IP-based login control over Telnet users:
Ste
Command
Remarks
1. Enter system view.
system-view —
2. Create a basic ACL and enter its view, or
enter the view of an existing basic ACL.
acl [ ipv6 ] number
acl-number [ match-order
{ config | auto } ]
Required.
By default, no basic ACL
exists.
3. Configure rules for this ACL.
rule [ rule-id ] { permit |
deny } [ source { sour-addr
sour-wildcard | any } |
time-range time-name |
fragment | logging ]*
Required.