Operation Manual – LoginH3C S3610&S5510 Series Ethernet Switches Chapter 7 Controlling Login Users7-7II. Network diagramInternetSw itchInternetSw itchsFigure 7-2 Network diagram for controlling SNMP users using ACLIII. Configuration procedure# Define a basic ACL. system-view[H3C] acl number 2000 match-order config[H3C-acl-basic-2000] rule 1 permit source 10.110.100.52 0[H3C-acl-basic-2000] rule 2 permit source 10.110.100.46 0[H3C-acl-basic-2000] rule 3 deny source any[H3C-acl-basic-2000] quit# Apply the ACL to only permit SNMP users sourced from the IP addresses of10.110.100.52 and 10.110.100.46 to access the switch.[H3C] snmp-agent community read h3c acl 2000[H3C] snmp-agent group v2c h3cgroup acl 2000[H3C] snmp-agent usm-user v2c h3cuser h3cgroup acl 20007.4 Controlling Web Users by Source IP AddressYou can manage a S3610&S5510 series Ethernet switch remotely through Web. Webusers can access a switch through HTTP connections.You need to perform the following two operations to control Web users by source IPaddresses.z Defining an ACLz Applying the ACL to control Web users7.4.1 PrerequisitesThe controlling policy against Web users is determined, including the source IPaddresses to be controlled and the controlling actions (permitting or denying).
