Controlling Web Users by Source IP Address 79As SNMP community name is a feature of SNMPv1 and SNMPv2c, the specifiedACLs in the command that configures SNMP community names (the snmp-agentcommunity command) take effect in the network management systems thatadopt SNMPv1 or SNMPv2c.Similarly, as SNMP group name and SNMP user name are features of SNMPv2c andthe higher SNMP versions, the specified ACLs in the commands that configureSNMP group names (the snmp-agent group command and the snmp-agentgroup v3 command) and SNMP user names (the snmp-agent usm-usercommand and the snmp-agent usm-user v3 command) take effect in thenetwork management systems that adopt SNMPv2c or higher SNMP versions. Ifyou configure both the SNMP group name and the SNMP user name and specifyACLs in the two operations, the switch will filter network management users byboth SNMP group name and SNMP user name.Configuration Example Network requirementsOnly SNMP users sourced from the IP addresses of 10.110.100.52 and10.110.100.46 are permitted to access the switch.Network diagramFigure 23 Network diagram for controlling SNMP users using ACLsConfiguration procedure# Define a basic ACL. system-view[SW4800G] acl number 2000 match-order config[SW4800G-acl-basic-2000] rule 1 permit source 10.110.100.52 0[SW4800G-acl-basic-2000] rule 2 permit source 10.110.100.46 0[SW4800G-acl-basic-2000] rule 3 deny source any[SW4800G-acl-basic-2000] quit# Apply the ACL to only permit SNMP users sourced from the IP addresses of10.110.100.52 and 10.110.100.46 to access the switch.[SW4800G] snmp-agent community read h3c acl 2000[SW4800G] snmp-agent group v2c h3cgroup acl 2000[SW4800G] snmp-agent usm-user v2c h3cuser h3cgroup acl 2000Controlling Web Usersby Source IP AddressYou can manage a Switch 4800G remotely through Web. Web users can access aswitch through HTTP connections.Switch10.110.100.46Host AIP networkHost B10.110.100.52
