Management Access-Class - Cisco SPS2024 Reference Manual

Management ACL Commands

management access-class

management access-class
SPS208G/SPS224G4/SPS2024 Command Line Interface Reference Guide
If no match criteria are defined the default is 'deny'.
If the device is reentered to an Access-List context, the new rules are entered at
the end of the Access-List.
Use the management access-class command to choose the active Access-List.
The active management list cannot be updated or removed.
For IPv6 management traffic tunneled in an IPv4 packet, the management ACLs
are applied first on the external IPv4 header (rules with service field are ignored),
and then again on the inner IPv6 header.
Example
The following example creates a management access list called 'mlist', configures
management Ethernet interfaces e1 and e9 and makes the new access list the
active list.
console# configure
console(config)# management access-list mlist
console(config-macl)# permit ip-source 192.168.200.1
console(config-macl)# exit
The management access-class Global Configuration mode command restricts
management connections by defining the active management access list. Use the
no form of this command to delete an Access List.
Syntax
management access-class {console-only |
no management access-class
name
}
19
248