Operation Manual – LoginH3C S3100 Series Ethernet Switches Chapter 7 User Control7-67.3.3 Configuration ExampleI. Network requirementsOnly SNMP users sourced from the IP addresses of 10.110.100.52 are permitted to loginto the switch.II. Network diagramSwitch10.110.100.46Host AIP networkHost B10.110.100.52Figure 7-2 Network diagram for controlling SNMP users using ACLsIII. Configuration procedure# Define a basic ACL. system-view[Sysname] acl number 2000[Sysname-acl-basic-2000] rule 1 permit source 10.110.100.52 0[Sysname-acl-basic-2000] quit# Apply the ACL to only permit SNMP users sourced from the IP addresses of10.110.100.52 to access the switch.[Sysname] snmp-agent community read aaa acl 2000[Sysname] snmp-agent group v2c groupa acl 2000[Sysname] snmp-agent usm-user v2c usera groupa acl 20007.4 Controlling Web Users by Source IP AddressYou can manage an S3100 Ethernet switch remotely through Web. Web users canaccess a switch through HTTP connections.You need to perform the following two operations to control Web users by source IPaddresses.z Defining an ACLz Applying the ACL to control Web users
