Operation Manual – LoginH3C S3610&S5510 Series Ethernet Switches Chapter 7 Controlling Login Users7-2To do… Use the command… RemarksEnter system view system-view —Create a basic ACL orenter basic ACL viewacl [ ipv6 ] numberacl-number[ match-order { config |auto } ]As for the acl numbercommand, the configkeyword is specified bydefault.Define rules for the ACLrule [ rule-id ] { permit |deny } [ source{ sour-addr sour-wildcard |any } | time-rangetime-name | fragment |logging ]*RequiredQuit to system view quit —Enter user interface viewuser-interface [ type ]first-number[ last-number ]—Apply the ACL to controlTelnet users by source IPaddressesacl [ ipv6 ] acl-number{ inbound | outbound }RequiredThe inbound keywordspecifies to filter the userstrying to Telnet to thecurrent switch.The outbound keywordspecifies to filter userstrying to Telnet to otherswitches from the currentswitch.7.2.3 Controlling Telnet Users by Source and Destination IP AddressesControlling Telnet users by source and destination IP addresses is achieved byapplying advanced ACLs, which are numbered from 3000 to 3999. Refer to the ACLmodule for information about defining an ACL.To do… Use the command… RemarksEnter system view system-view —Create an advanced ACLor enter advanced ACLviewacl [ ipv6 ] numberacl-number[ match-order { config |auto } ]As for the acl numbercommand, the configkeyword is specified bydefault.Define rules for the ACL rule [ rule-id ] { permit |deny } rule-stringRequiredYou can define rules asneeded to filter by specificsource and destination IPaddresses.Quit to system view quit —