7 User Control

Refer to the ACL part for information about ACL.

Introduction

The switching engine provides ways to control different types of login users, as listed in Table 7-1.

Table 7-1Ways to control different types of login users

 

 

Login mode

 

Control method

 

Implementation

 

Reference

 

 

 

 

By source IP

 

Through basic ACLs

 

Controlling Telnet Users by Source IP

 

 

 

 

address

 

 

Addresses.

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

Telnet

 

By source and

 

Through advanced

 

Controlling Telnet Users by Source and

 

 

 

destination IP

 

 

 

 

 

 

ACLs

 

Destination IP Addresses

 

 

 

 

address

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

By source MAC

Through Layer 2

 

Controlling Telnet Users by Source MAC

 

 

 

address

ACLs

 

Addresses

 

 

 

 

 

 

 

 

 

 

SNMP

By source IP

Through basic ACLs

 

Controlling Network Management Users

 

 

addresses

 

by Source IP Addresses

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

By source IP

 

Through basic ACLs

 

Controlling Web Users by Source IP

 

 

 

 

addresses

 

 

Address

 

 

WEB

 

 

 

 

 

 

 

 

 

 

 

 

 

 

Disconnect Web

By executing

 

Disconnecting a Web User by Force

 

 

 

 

 

 

 

users by force

commands at CLI

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

Controlling Telnet Users

Prerequisites

The controlling policy against Telnet users is determined, including the source IP addresses, destination IP addresses and source MAC addresses to be controlled and the controlling actions (permitting or denying).

Controlling Telnet Users by Source IP Addresses

Controlling Telnet users by source IP addresses is achieved by applying basic ACLs, which are numbered from 2000 to 2999.

Follow these steps to control Telnet users by source IP addresses:

7-1

Page 48
Image 48
3Com WX3000 operation manual User Control, Prerequisites, Controlling Telnet Users by Source IP Addresses