block outside IP telnet USG

background :

customer wants to block outside IP telnet USG2200(version:V3R1)<?xml:namespace prefix = "v" ns = "urn:schemas-microsoft-com:vml" />

sulotion :

1、if customer know the outside IP , just set a interzone policy to block the ip from untrust to trust.

refer below command:

     policy interzone untrust local outbound

     policy 0

     policy source x.x.x.x

     policy destination USG-outside interface IP-address

     policy service telnet

     action deny

refer below link:

http://support.huawei.com/hedex/pages/EDOC100008643930002967/13/EDOC100008643930002967/13/resources/cfg_sec/sec_vsp_cfg_pkfilter_0023.html?ft=0&fe=10&hib=9.3.7.5.3.4&id=sec_vsp_cfg_pkfilter_0023&text=Configuring%20a%20Local%20Policy&docid=EDOC1000086439 

2、set the interface of management access disable the telnet using Web

<?xml:namespace prefix = "o" ns = "urn:schemas-microsoft-com:office:office" /> refer below link:

http://support.huawei.com/hedex/pages/EDOC100008643930002967/13/EDOC100008643930002967/13/resources/online_help_en/sec_vsp_help_network_0003.html?ft=0&fe=10&hib=9.4.5.1.2&id=sec_vsp_help_network_0003&text=Interface&docid=EDOC1000086439