F1060 IPV6 telnet登录限制案例

为了确保设备的IPV6 telnet安全登陆管理，需对telnet进行登录限制。  

F1060版本信息如下：

dis version

H3C Comware Software, Version 7.1.064, Alpha 7164

Copyright (c) 2004-2017 New H3C Technologies Co., Ltd. All rights reserved.

H3C SecPath F1060 uptime is 0 weeks, 0 days, 0 hours, 16 minutes

Last reboot reason: User reboot

Boot image: flash:/sim_f1000_fw-cmw710-boot-a6401.bin

Boot image version: 7.1.064, Alpha 7164

  Compiled Sep 18 2017 16:00:00

Boot image: flash:/sim_f1000_fw-cmw710-system-a6401.bin

Boot image version: 7.1.064, Alpha 7164

  Compiled Sep 18 2017 16:00:00

1、配置VLAN的IPV6地址

[FW1]int vlan 1

[FW1-Vlan-interface1]ipv6 address 1::1 64

[FW1-Vlan-interface1]quit

2、创建IPV6 ACL，指定特定IPV6地址

[FW1]acl ipv6 basic 2000

[FW1-acl-ipv6-basic-2000]rule 0 permit source 1:: 64

[FW1-acl-ipv6-basic-2000]rule 1 deny source any

3、创建用户名、密码，赋予权限

[FW1]local-user ninglihua

[FW1-luser-manage-ninglihua]password simple ninglihua

[FW1-luser-manage-ninglihua]service-type ssh telnet http https

[FW1-luser-manage-ninglihua]authorization-attribute user-role

network-admin

[FW1-luser-manage-ninglihua]quit

5、配置VTY

[FW1]line vty 0 4

[FW1-line-vty0-4]authentication-mode scheme

[FW1-line-vty0-4]protocol inbound all

[FW1-line-vty0-4]quit

6、配置telnet与IPV6 ACL绑定

[FW1]telnet server enable

[FW1]telnet server ipv6 acl ipv6 2000