Configuring Web Login Control; Configuring Source Ip-Based Web Login Control; Logging Off Online Web Users - HP 5830 Series Configuration Manual

Configuration procedure
# Create ACL 2000, and configure rule 1 to permit packets sourced from Host B, and rule 2 to permit
packets sourced from Host A.
<Sysname> system-view
[Sysname] acl number 2000 match-order config
[Sysname-acl-basic-2000] rule 1 permit source 10.110.100.52 0
[Sysname-acl-basic-2000] rule 2 permit source 10.110.100.46 0
[Sysname-acl-basic-2000] quit
# Associate the ACL with the SNMP community and the SNMP group.
[Sysname] snmp-agent community read aaa acl 2000
[Sysname] snmp-agent group v2c groupa acl 2000
[Sysname] snmp-agent usm-user v2c usera groupa acl 2000

Configuring Web login control

Use a basic ACL (2000 to 2999) to filter HTTP/HTTPS traffic by source IP address for Web login control.
To access the device, a Web user must use an IP address permitted by the ACL.
You can also log off suspicious Web users who have been logged in.
HTTP is not supported in FIPS mode.

Configuring source IP-based Web login control

Step
Enter system view.
1.
2. Create a basic ACL and enter
its view, or enter the view of
an existing basic ACL.
3. Create rules for this ACL.
4. Exit the basic ACL view.
5. Associate the HTTP service
with the ACL.
6. Associate the HTTPS service
with the ACL.

Logging off online Web users

Command
system-view
acl [ ipv6 ] number acl-number
[ name name ] [ match-order
{ config | auto } ]
rule [ rule-id ] { deny | permit }
[ counting | fragment | logging |
source { sour-addr sour-wildcard |
any } | time-range
time-range-name | vpn-instance
vpn-instance-name ] *
quit
ip http acl acl-number
ip https acl acl-number
62
Remarks
N/A
By default, no basic ACL exists.
N/A
N/A
Configure either or both of the
commands.
HTTP login and HTTPS login are
separate login methods. To use
HTTPS login, you do not need to
configure HTTP login.