H3C S3100 Series, Operation Manual

Page: 73 / 1057

7-6
Operation Command Description
Create a basic ACL or
enter basic ACL view
acl number
acl-number
[ match-order { config | auto } ]
As for the
acl number
command, the
config keyword is specified by default.
Define rules for the ACL
rule [ rule-id ] { deny | permit }
[ rule-string ]
Required
Quit to system view quit —
Apply the ACL to control
Web users
ip http acl acl-number
Optional
By default, no ACL is applied for Web
users.
Disconnecting a Web User by Force
The administrator can disconnect a Web user by force using the related commands.
Table 7-6 Disconnect a Web user by force
Operation Command Description
Disconnect a Web user by
force free web-users { all | user-id user-id |
user-name user-name }
Required
Execute this command in user view.
Configuration Example
Network requirements
Only the Web users sourced from the IP address of 10.110.100.52 are permitted to access the switch.
Network diagram
Figure 7-3 Network diagram for controlling Web users using ACLs
Switch
10.110.100.46
Host A
IP network
Host B
10.110.100.52
Configuration procedure
# Define a basic ACL.
<Sysname> system-view
[Sysname] acl number 2030
[Sysname-acl-basic-2030] rule 1 permit source 10.110.100.52 0
[Sysname-acl-basic-2030] quit
# Apply ACL 2030 to only permit the Web users sourced from the IP address of 10.110.100.52 to access
the switch.