8-2Controlling Telnet Users by Source IP AddressesControlling Telnet users by source IP addresses is achieved by applying basic ACLs, which arenumbered from 2000 to 2999.Follow these steps to control Telnet users by source IP addresses:To do… Use the command… RemarksEnter system view system-view —Create a basic ACL or enterbasic ACL viewacl number acl-number[ match-order { auto | config } ]As for the acl number command, theconfig keyword is specified by default.Define rules for the ACL rule [ rule-id ] { deny | permit }[ rule-string ] RequiredQuit to system view quit —Enter user interface view user-interface [ type ]first-number [ last-number ] —Apply the ACL to controlTelnet users by source IPaddressesacl acl-number { inbound |outbound }RequiredThe inbound keyword specifies to filterthe users trying to Telnet to the currentswitch.The outbound keyword specifies to filterusers trying to Telnet to other switchesfrom the current switch.Controlling Telnet Users by Source and Destination IP AddressesControlling Telnet users by source and destination IP addresses is achieved by applying advancedACLs, which are numbered from 3000 to 3999.Follow these steps to control Telnet users by source and destination IP addresses:To do… Use the command… RemarksEnter system view system-view —Create an advanced ACL orenter advanced ACL viewacl number acl-number[ match-order { auto | config } ]As for the acl number command, theconfig keyword is specified by default.Define rules for the ACL rule [ rule-id ] { deny | permit }protocol [ rule-string ]RequiredYou can define rules as needed to filterby specific source and destination IPaddresses.Quit to system view quit —Enter user interface view user-interface [ type ] first-number[ last-number ] —Apply the ACL to controlTelnet users by specifiedsource and destination IPaddressesacl acl-number { inbound |outbound }RequiredThe inbound keyword specifies tofilter the users trying to Telnet to thecurrent switch.The outbound keyword specifies tofilter users trying to Telnet to otherswitches from the current switch.
