Permit (Management) - 3Com 3CRUS2475 Command Reference Manual

318 C 21: M
HAPTER
permit
(Management)
ACL C
ANAGEMENT OMMANDS
Management ACL requires a valid management interface, which is a port,
VLAN, or port-channnel with an IP address or console interface.
Management ACL only restricts access to the device for management
configuration or viewing.
Example
The following example creates a management access list called 'mlist',
configures management Ethernet interfaces g1 and g9 and makes the
new access list the active list.
Console(config)# management access-list mlist
Console(config-macl)# permit ethernet 1g
Console(config-macl)# permit ethernet g9
Console(config-macl)# exit
Console(config)# management access-class mlist
The following example creates a management access list called 'mlist',
configures all interfaces to be management interfaces except Ethernet
interfaces g1 and g9 and makes the new access list the active list.
Console(config)# management access-list mlist
Console(config-macl)# deny ethernet g1
Console(config-macl)# deny ethernet g9
Console(config-macl)# permit
Console(config-macl)# exit
Console(config)# management access-class mlist
The permit Management Access-List Configuration mode command
defines a permit rule.
Syntax
permit [ethernet interface-number | vlan vlan-id | port-channel
port-channel-number |] [service service]
permit ip-source ip-address [mask mask | prefix-length] [ethernet
interface-number | vlan vlan-id | port-channel port-channel-number |]
[service service]
Parameters
interface-number — A valid Ethernet port number.
■