Table of Contents
Advertisement
Configuration procedure
# Create ACL 2000, and configure rule 1 to permit packets sourced from Host B, and rule 2 to permit
packets sourced from Host A.
<Sysname> system-view
[Sysname] acl number 2000 match-order config
[Sysname-acl-basic-2000] rule 1 permit source 10.110.100.52 0
[Sysname-acl-basic-2000] rule 2 permit source 10.110.100.46 0
[Sysname-acl-basic-2000] quit
# Associate the ACL with the SNMP community and the SNMP group.
[Sysname] snmp-agent community read aaa acl 2000
[Sysname] snmp-agent group v2c groupa acl 2000
[Sysname] snmp-agent usm-user v2c usera groupa acl 2000
Configuring Web login control
Use a basic ACL (2000 to 2999) to filter HTTP traffic by source IP address for Web login control. To
access the device, a Web user must use an IP address permitted by the ACL.
You can also log off suspicious Web users who have been logged in.
Configuring source IP-based Web login control
Step
1.
Enter system view.
2.
Create a basic ACL and
enter its view, or enter the
view of an existing basic
ACL.
3.
Create rules for this ACL.
4.
Exit the basic ACL view.
5.
Associate the HTTP or
HTTPS service with the
ACL.
Logging off online Web users
Task
Log off online Web users.
Command
system-view
acl [ ipv6 ] number acl-number
[ match-order { config | auto } ]
rule [ rule-id ] { permit | deny }
[ source { sour-addr
sour-wildcard | any } | time-range
time-name | fragment | logging ]*
quit
•
ip http acl acl-number
•
ip https acl acl-number
Command
free web-users { all | user-id
user-id | user-name
user-name }
63
Remarks
N/A
By default, no basic ACL exists.
N/A
N/A
HTTP and HTTPS are
independent of each other.
Configure one or both of the
commands as required.
The ip http acl acl-number
command is not supported in
FIPS mode.
Remarks
Available in user interface view
Advertisement
Table of Contents
