Allow - Cisco CRS User Manual

allow

allow
To configure an interface as an inband or out-of-band interface to allow all peer addresses for a specified
protocol or all protocols, use the allow command in management plane protection inband interface configuration
mode or management plane protection out-of-band interface configuration. To disallow a protocol on an
interface, use the no form of this command.
allow {protocol| all} [peer]
no allow {protocol| all} [peer]
Syntax Description
protocol
all
peer
Command Default
By default, no management protocol is allowed on any interface except the management interfaces.
Command Modes
Management plane protection inband interface configuration
Command History
Release
Release 3.5.0
Release 3.6.0
Release 4.0.0
Cisco IOS XR System Security Command Reference for the Cisco CRS Router, Release 4.1
166
Interface configured to allow peer-filtering for the following specified protocol's traffic:
• HTTP(S)
• SNMP (also versions)
• Secure Shell (v1 and v2)
• TFTP
• Telnet
• XML
Configures the interface to allow peer-filtering for all the management traffic that is
specified in the list of protocols.
(Optional) Configures the peer address on the interface. Peer refers to the neighboring
router interface in which traffic might arrive to the main router.
Modification
This command was introduced.
The following modifications were added:
• The peer keyword was added to support peer-filtering.
• Management plane protection out-of-band interface configuration
mode was added.
The XML keyword was added.
Management Plane Protection Commands
OL-24740-01