Operation Manual – LoginH3C S7500 Series Ethernet Switches Chapter 6 User Control6-2To do… Use the command… RemarksEnter system view system-view —Create a basic ACL orenter basic ACL viewacl { number acl-number| name acl-name[ advanced | basic | link |user ] } [ match-order{ config | auto } ]As for the acl numbercommand, the configkeyword is specified bydefault.Define rules for the ACLrule [ rule-id ] { permit |deny } [ source{ source-addr wildcard |any } | fragment |time-range time-name ]*RequiredReturn to system view quit —Enter user interface viewuser-interface [ type ]first-number[ last-number ]—Apply the ACL to controlTelnet users by source IPaddressesacl acl-number { inbound| outbound }RequiredThe inbound keywordspecifies to filter the userstrying to Telnet to thecurrent switch.The outbound keywordspecifies to filter userstrying to Telnet to otherswitches from the currentswitch.6.2.2 Controlling Telnet Users by Source and Destination IP AddressesControlling Telnet users by source and destination IP addresses is achieved byapplying advanced ACLs, which are numbered from 3000 to 3999. Refer to the ACLmodule for information about defining an ACL.Follow these steps to control Telnet users by source and destination IP addresses:To do… Use the command… RemarksEnter system view system-view —Create an advanced ACLor enter advanced ACLviewacl { number acl-number| name acl-name[ advanced | basic | link |user ] } [ match-order{ config | auto } ]As for the acl numbercommand, the configkeyword is specified bydefault.
