How to manage restriction to limiting the ports from end user to server

[OPRoger]

Dear All,

kindly suggest me the best way to restrict users to access servers and allow only required ports or services.

ACL is the one option but it is time consuming and required more ACL for each user. I need something that easily manageable.

[balaji.bandi]

ACL is only option you have (if you do not have FW between)

each user uses a different port ? all the users use the same ports?

then only allow those ports from any IP range(or known IP range) rest deny any?

if this is not correct explain more ?