HP A5800 Series User Manual

80
Procedure
# Configure basic ACL 2000, and configure rule 1 to permit packets sourced from Host B, and rule 2 to
permit packets sourced from Host A.
<Sysname> system-view
[Sysname] acl number 2000 match-order config
[Sysname-acl-basic-2000] rule 1 permit source 10.110.100.52 0
[Sysname-acl-basic-2000] rule 2 permit source 10.110.100.46 0
[Sysname-acl-basic-2000] quit
# Reference ACL 2000 in user interface view to allow Telnet users from Host A and Host B to access the
Device.
[Sysname] user-interface vty 0 15
[Sysname-ui-vty0-15] acl 2000 inbound
Configuring source IP-based login control over NMS
users
Log in to the NMS to remotely manage the devices. SNMP is used for communication between the NMS and
the agent that resides in the device. By using the ACL, control SNMP user access to the device.
Configuration preparation
Before configuration, determine the permitted or denied source IP addresses.
Configuring source IP-based login control over NMS users
Because basic ACLs match the source IP addresses of packets, use basic ACLs to implement source IP-based
login control over NMS users. Basic ACLs are numbered from 2000 to 2999. For more information about
ACL, see ACL and QoS Configuration Guide.
To configure source IP-based login control over NMS users:
Ste
p
Command Remarks
1. Enter system view.
system-view —
2. Create a basic ACL and enter its
view, or enter the view of an existing
basic ACL.
acl [ ipv6 ] number acl-number
[ match-order { config | auto } ]
Required.
By default, no basic
ACL exists.
3. Create rules for this ACL.
rule [ rule-id ] { permit | deny } [ source
{ sour-addr sour-wildcard | any } |
time-range time-name | fragment |
logging ]*
Required.
4. Exit the basic ACL view.
quit —
5. Associate this SNMP community with
the ACL.
snmp-agent community { read | write }
community-name [ acl acl-number |
mib-view view-name ]*
Required.
Associate the ACL

HP A5800 Series Specifications

General

Brand	HP
Model	A5800 Series
Category	Switch
Language	English