79
To configure source MAC-based login control over Telnet users:
Ste
Command
Remarks
1. Enter system view.
system-view —
2. Create an Ethernet frame header
ACL and enter its view.
acl number acl-number
[ match-order { config | auto } ]
Required.
By default, no advanced
ACL exists.
3. Configure rules for the ACL.
rule [ rule-id ] { permit | deny }
rule-string
Required.
4. Exit the advanced ACL view.
quit —
5. Enter user interface view.
user-interface [ type ] first-number
[ last-number ]
—
6. Use the ACL to control user login by
source MAC address.
acl acl-number inbound
Required.
inbound: Filters incoming
Telnet packets.
NOTE:
The above configuration does not take effect if the Telnet client and server are not in the same subnet.
Source MAC-based login control configuration example
Network requirements
As shown in Figure 9, configure an ACL on the Device to permit only incoming Telnet packets sourced from
Host A and Host B.
Figure 9 Network diagram for configuring source MAC-based login control