34
Figure 14
Network diagram
Configuration procedure
# Configure basic ACL 2000, and configure rule 1 to permit packets sourced from Host B, and rule 2 to
permit packets sourced from Host A.
<Sysname> system-view
[Sysname] acl number 2000 match-order config
[Sysname-acl-basic-2000] rule 1 permit source 10.110.100.52 0
[Sysname-acl-basic-2000] rule 2 permit source 10.110.100.46 0
[Sysname-acl-basic-2000] quit
# Reference ACL 2000 on the user interfaces VTY 0 through VTY 4 so only Host A and Host B can Telnet
to the AP.
[Sysname] user-interface vty 0 4
[Sysname-ui-vty0-4] acl 2000 inbound
Configuring source IP-based SNMP login control
Use a basic ACL (2000 to 2999) to control SNMP logins by source IP address. To access the requested
MIB view, an NMS must use a source IP address permitted by the ACL.
Configuration procedure
To configure source IP-based SNMP login control:
Step Command
Remarks
1.
Enter system view.
system-view
N/A
2.
Create a basic ACL and
enter its view, or enter the
view of an existing basic
ACL.
acl
[
ipv6
]
number
acl-number
[
name
name
]
[
match-order
{
config
|
auto
} ]
By default, no basic
ACL exists.
3.
Configure an ACL rule.
rule
[
rule-id
] {
deny
|
permit
} [
counting
|
fragment
|
logging
|
source
{
sour-addr
sour-wildcard
|
any
} |
time-range
time-range-name
]
N/A
