H3C Technologies H3C SecPath F1000-E - Manual (Page 103)

95
Step Command Remarks
2. Create a basic ACL and enter
its view, or enter the view of
an existing basic ACL.
acl [ ipv6 ] number acl-number
[ name acl-name ] [ match-order
{ config | auto } ]
By default, no basic ACL exists.
3. Create rules for this ACL.
rule [ rule-id ] { permit | deny }
[ source { sour-addr sour-wildcard
| any } | time-range time-name |
fragment | logging ]*
N/A
4. Exit the basic ACL view. quit N/A
5. Associate the HTTP service
with the ACL.
ip http acl acl-number Use one command.
For more information, see Getting
Started Command Reference.
6. Associate the HTTPS service
with the ACL.
ip https acl acl-number
Logging off online Web users
To log off online Web users:
Task Command Remarks
Log off online Web users.
free web-users { all | user-id
user-id | user-name
user-name }
Execute the command in user interface
view.
Source IP-based Web login control configuration example (at
the CLI)
Network requirements
As shown in Figure 59 , configure SecPath to allow only Web users from Host B to access.
Figure 59 Network diagram
Configuration procedure
# Create ACL 2000, and configure rule 1 to permit packets sourced from Host B.
<Sysname> system-view
[Sysname] acl number 2030 match-order config