Operation Manual – LoginH3C S3610&S5510 Series Ethernet Switches Chapter 8 Controlling Login Users8-48.2.5 Configuration ExampleI. Network requirementsOnly the Telnet users sourced from the IP address of 10.110.100.52 and 10.110.100.46are permitted to log into the switch.II. Network diagramFigure 8-1 Network diagram for controlling Telnet users using ACLsIII. Configuration procedure# Define a basic ACL. system-view[H3C] acl number 2000 match-order config[H3C-acl-basic-2000] rule 1 permit source 10.110.100.52 0[H3C-acl-basic-2000] rule 2 permit source 10.110.100.46 0[H3C-acl-basic-2000] rule 3 deny source any[H3C-acl-basic-2000] quit# Apply the ACL.[H3C] user-interface vty 0 4[H3C-ui-vty0-4] acl 2000 inbound8.3 Controlling Network Management Users by Source IPAddressesYou can manage a S3610&S5510 series Ethernet switch through networkmanagement software. Network management users can access switches throughSNMP.You need to perform the following two operations to control network management usersby source IP addresses.z Defining an ACLz Applying the ACL to control users accessing the switch through SNMP
