Step

 

Command

Remarks

3.

Configure an ACL rule.

rule [ rule-id] { permit deny }

N/A

rule-string

 

 

 

 

 

 

 

4.

Exit advanced ACL view.

quit

N/A

 

 

 

 

5.

Enter user interface view.

user-interface [ type ] first-number

N/A

[ last-number ]

 

 

 

 

 

 

 

 

 

 

• inbound: Filters incoming Telnet

 

 

 

packets.

 

 

 

• outbound: Filters outgoing

6.

Apply the ACL to the user

acl [ ipv6 ] acl-number{ inbound

Telnet packets.

NOTE:

 

interfaces.

outbound }

Support for the ipv6 keyword depends on the device model. For more information, see Getting Started Command Reference.

Configuring source MAC-based Telnet login control

Ethernet frame header ACLs apply to Telnet traffic only if the Telnet client and server are located in the same subnet.

To configure source MAC-based Telnet login control:

Step

 

Command

Remarks

1.

Enter system view.

system-view

N/A

 

 

 

 

2.

Create an Ethernet frame

acl number acl-number[ name name ]

By default, no Ethernet

 

header ACL and enter its

 

[ match-order { config auto } ]

frame header ACL exists.

 

view.

 

 

 

 

 

 

 

3.

Configure an ACL rule.

rule [ rule-id] { permit deny } rule-string

N/A

 

 

 

 

4.

Exit Ethernet frame header

quit

N/A

 

ACL view.

 

 

 

 

 

 

 

5.

Enter user interface view.

user-interface [ type ] first-number

N/A

[ last-number ]

 

 

 

 

 

 

 

6.

Use the ACL to control user

 

inbound: Filters incoming

 

logins by source MAC

acl acl-numberinbound

 

packets.

 

address.

 

 

 

 

 

 

 

 

Telnet login control configuration example

Network requirements

Configure the firewall in Figure 78 to permit only incoming Telnet packets sourced from Host A and Host B.

115