telnet server acl

Use telnet server acl to apply an ACL to filter Telnet logins.

Use undo telnet server acl to restore the default.

Syntax

telnet server acl acl-number

undo telnet server acl

Default

No ACL is used to filter Telnet logins.

Views

System view

Predefined user roles

network-admin

mdc-admin

Parameters

acl-number: Specifies an ACL by its number:

• Basic ACL—2000 to 2999.

• Advanced ACL—3000 to 3999.

• Ethernet frame header ACL—4000 to 4999.

Usage guidelines

This command is not supported in FIPS mode.

Only one ACL can be used to filter Telnet logins, and only users permitted by the ACL can Telnet to the device.

This command does not take effect on existing Telnet connections.

You can specify an ACL that has not been created yet in this command. The command takes effect after the ACL is created.

For more information about ACL, see ACL and QoS Configuration Guide.

Examples

# Permit only the user at 1.1.1.1 to Telnet to the device.

<Sysname> system-view
[Sysname] acl number 2001
[Sysname-acl-basic-2001] rule permit source 1.1.1.1 0
[Sysname-acl-basic-2001] quit
[Sysname] telnet server acl 2001