Permit (Management) - Alcatel OS-LS-6224 User Manual

If you reenter an access list context, the new rules are entered at the end of
the access list.
Use the management access-class command to select the active access list.
The active management list cannot be updated or removed.
Management ACL requires a valid management interface, which is a port,
VLAN, or port-channnel with an IP address or console interface. Management
ACL only restricts access to the device for management configuration or
viewing.
Examples
The following example creates a management access list called mlist, configures
management Ethernet interfaces 1/e1 and 2/e9 and makes the new access list the
active list.
Console(config)# management access-list mlist
Console(config-macl)# permit ethernet 1/e1
Console(config-macl)# permit ethernet 2/e9
Console(config-macl)# exit
Console(config)# management access-class mlist
The following example creates a management access list called mlist, configures all
interfaces to be management interfaces except Ethernet interfaces 1/e1 and 2/e9
and makes the new access list the active list.
Console(config)# management access-list mlist
Console(config-macl)# deny ethernet 1/e1
Console(config-macl)# deny ethernet 2/e9
Console(config-macl)# permit
Console(config-macl)# exit
Console(config)# management access-class mlist
Related Commands

permit (Management)

deny (Management)
show management access-list
show management access-class
management access-class
permit (Management)
The permit Management Access-List Configuration mode command defines a
permit rule.
Syntax
permit [ethernet interface-number | vlan vlan-id | port-channel
port-channel-number] [service service]
Management ACL Commands
4
457