Advertisement
Management ACL
management access-list
The management access-list Global Configuration mode command defines an access-list for
management, and enters the access-list for configuration. Once in the access-list configuration
mode, the denied or permitted access conditions are configured with the deny and permit
commands. To remove an access list, use the no form of this command.
Syntax
management access-list name
no management access-list name
•
name — The access list name using up to 32 characters.
Default Configuration
By default console-only management access-list is defined.
Command Mode
Global Configuration mode
User Guidelines
•
This command enters the access-list configuration mode, where the denied or permitted
access conditions with the deny and permit commands must be defined.
•
If no match criteria are defined the default is "deny".
•
If reentering to an access-list context, the new rules are entered at the end of the access-list.
•
Use the management access-class command to select the active access-list.
•
The active management list cannot be updated or removed.
•
Management ACL requires a valid management interface (valid IFindex). A valid
management interface is an interface with an IP address or console interface. A valid
(IFindex) management interface can be a single port, vlan or port-channel. Management
ACL only restricts access to the Ethernet Switch Module for management configuration or
viewing.
14
169
Management ACL
Advertisement
