113
[Firewall-ui-vty0-4] acl 2000 inbound
Configuring source IP-based login control over NMS users
Administrators can use a network management station (NMS) to remotely log in and manage the
Firewall through the Simple Network Management Protocol (SNMP). By using an ACL, you can control
SNMP user access to the Firewall.
Configuration preparation
Before configuration, determine the permitted or denied source IP addresses.
Configuration procedure
Basic ACLs match the source IP addresses of packets. You can use basic ACLs to implement source
IP-based login control over NMS users. Basic ACLs are numbered from 2000 to 2999.
Follow these steps to configure source IP-based login control over NMS users:
To do…
Use the command…
Remarks
Enter system view
system-view
—
Create a basic ACL and enter its
view, or enter the view of an
existing basic ACL
acl
[
ipv6
]
number
acl-number
[
match-order
{
config
|
auto
} ]
Required
By default, no basic ACL exists.
Create rules for this ACL
rule
[
rule-id
] {
permit
|
deny
}
[
source
{
sour-addr sour-wildcard
|
any
} |
time-range
time-name
|
fragment
|
logging
]*
Required
Exit the basic ACL view
quit
—
Configure an SNMP community,
associating the SNMP community
with the ACL
snmp-agent community
{
read
|
write
}
community-name
[
acl
acl-number
]
Create an SNMP group,
associating the SNMP group with
the ACL
snmp-agent group
{
v1
|
v2c
}
group-name
[
read-view
read-view
] [
write-view
write-view
] [
notify-view
notify-view
] [
acl
acl-number
]
snmp-agent group
v3
group-name
[
authentication
|
privacy
]
[
read-view
read-view
]
[
write-view
write-view
]
[
notify-view
notify-view
] [
acl
acl-number
]
Add an SNMP user to the SNMP
group, associating the user with
the ACL
snmp-agent usm-user
{
v1
|
v2c
}
user-name
group-name
[
acl
acl-number
]
snmp-agent usm-user
v3
user-name
group-name
[ [
cipher
]
authentication-mode
{
md5
|
sha
}
auth-password
[
privacy-mode
{
3des
|
aes128
|
des56
}
priv-password
] ] [
acl
acl-number
]
Required
You can associate the ACL when
creating the community, the SNMP
group, and the user.
For more information about
SNMP, see
System Management
and Maintenance Configuration
Guide.
