8-2To do… Use the command… RemarksCreate a basic ACL or enterbasic ACL viewacl [ ipv6 ] number acl-number[ match-order { config |auto } ]As for the acl numbercommand, the config keywordis specified by default.Define rules for the ACLrule [ rule-id ] { permit | deny }[ source { sour-addrsour-wildcard | any } |time-range time-name |fragment | logging ]*RequiredQuit to system view quit —Enter user interface view user-interface [ type ]first-number [ last-number ] —Apply the ACL to control Telnetusers by source IP addressesacl [ ipv6 ] acl-number{ inbound | outbound }RequiredThe inbound keywordspecifies to filter the userstrying to Telnet to the currentswitch.The outbound keywordspecifies to filter users trying toTelnet to other switches fromthe current switch.Controlling Telnet Users by Source and Destination IP AddressesThis configuration needs to be implemented by advanced ACL; an advanced ACL ranges from 3000 to3999. For the definition of ACL, refer to ACL Configuration in the Security Volume.Follow these steps to control Telnet users by source and destination IP addresses:To do… Use the command… RemarksEnter system view system-view —Create an advanced ACL orenter advanced ACL viewacl [ ipv6 ] number acl-number[ match-order { config |auto } ]As for the acl numbercommand, the config keywordis specified by default.Define rules for the ACL rule [ rule-id ] { permit | deny }rule-stringRequiredYou can define rules as neededto filter by specific source anddestination IP addresses.Quit to system view quit —Enter user interface view user-interface [ type ]first-number [ last-number ] —Apply the ACL to control Telnetusers by specified source anddestination IP addressesacl [ ipv6 ] acl-number{ inbound | outbound }RequiredThe inbound keywordspecifies to filter the userstrying to Telnet to the currentswitch.The outbound keywordspecifies to filter users trying toTelnet to other switches fromthe current switch.
