Configuring source IP-based login control over web users

You can log in to the web management page of the device through HTTP/HTTPS to remotely manage the devices. By using the ACL, you can control web user access to the device.

Configuration preparation

Before configuration, determine the permitted or denied source IP addresses.

Configuring source IP-based login control over web users

Because basic ACLs match the source IP addresses of packets, you can use basic ACLs to implement source IP-based login control over web users. Basic ACLs are numbered from 2000 to 2999. For more information about ACL, see the ACL and QoS Configuration Guide.

Follow these steps to configure source IP-based login control over web users:

To do…

Use the command…

Remarks

Enter system view

system-view

—

 

 

 

Create a basic ACL and enter its

acl [ ipv6 ] number acl-number

Required

view, or enter the view of an

[ match-order { config auto } ]

By default, no basic ACL exists.

existing basic ACL

 

 

 

 

 

 

rule [ rule-id] { permit deny }

 

Create rules for this ACL

[ source { sour-addr sour-wildcard

Required

any } time-range time-name

 

 

 

fragment logging ]*

 

 

 

 

Exit the basic ACL view

quit

—

 

 

 

Associate the HTTP service with the

ip http acl acl-number

 

ACL

 

 

Required to use one command

 

 

Associate the HTTPS service with

ip https acl acl-number

 

the ACL

 

 

 

 

 

 

Logging off online web users

Follow the step to log off online web users:

To do…

Use the command…

Remarks

Log off online web users

free web-users { all user-id

user-id user-nameuser-name }

 

Required

Execute the command in user interface view.

83