H3C Technologies H3C SecPath F1000-E - Manual (Page 274)

3
To do… Use the command… Remarks
Associate the HTTP service with an
ACL
ip http acl acl-number
Required
The HTTP service is not associated
with an ACL by default.
NOTE:
•
The HTTP service can be associated with a basic ACL (with the ACL numbers 2000 to 2999), and ACLs
of the same type will overwrite each other, or, in other words, if you execute the ip http acl command for
multiple times to associate the HTTP with the ACLs, the HTTP service is only associated with the last
specified ACL.
• For more information about ACLs, see ACL Configuration in the Firewall Web Configuration Manual.
Displaying and Maintaining HTTP
To do… Use the command… Remarks
Display information about HTTP display ip http Available in any view
HTTP Configuration Example
Network requirements
As shown in Figure 1 , filter users logging in through Web interface according to the source IP addresses,
enabling only users in the 10.1.1.0/24 segment to access and control the device through the Web
interface.
Figure 1 HTTP network diagram
10.1.1.1/24
Host A
10.1.1.2/24 10.2.1.2/24
Device
Host B
10.2.1.1/24
Configuration procedure
Step1 Configure the HTTP server Device.
# Create basic ACL 2000, allowing packets with the source IP address in 10.1.1.0/24.
system-view
[Device] acl number 2000