7-1
7 User Control
Refer to the ACL part for information about ACL.
Introduction
The switching engine provides ways to control different types of login users, as listed in Table 7-1.
Table 7-1 Ways to control different types of login users
Login mode Control method Implementation Reference
By source IP
address Through basic ACLs Controlling Telnet Users by Source IP
Addresses.
By source and
destination IP
address
Through advanced
ACLs Controlling Telnet Users by Source and
Destination IP Addresses
Telnet
By source MAC
address Through Layer 2
ACLs Controlling Telnet Users by Source MAC
Addresses
SNMP By source IP
addresses Through basic ACLs Controlling Network Management Users
by Source IP Addresses
By source IP
addresses Through basic ACLs Controlling Web Users by Source IP
Address
WEB Disconnect Web
users by force By executing
commands at CLI Disconnecting a Web User by Force
Controlling Telnet Users
Prerequisites
The controlling policy against Telnet users is determined, including the source IP addresses, destination
IP addresses and source MAC addresses to be controlled and the controlling actions (permitting or
denying).
Controlling Telnet Users by Source IP Addresses
Controlling Telnet users by source IP addresses is achieved by applying basic ACLs, which are
numbered from 2000 to 2999.
Follow these steps to control Telnet users by source IP addresses: