Advertisement
Examples
The following example shows how to create an access-list called "mlist", configure two management
ethernet interfaces g11 and g12, and make the access-list the active list.
console(config)# management access-list mlist
console(config-macl)# permit ethernet g11
console(config-macl)# permit ethernet g12
console(config-macl)# exit
console(config)# management access-class mlist
The following example shows how to create an access-list called "mlist", configure all interfaces to
be management interfaces except ethernet interfaces g11 and g12, and make the access-list the
active list.
console(config)# management access-list mlist
console(config-macl)# deny ethernet g11
console(config-macl)# deny ethernet g12
console(config-macl)# permit
console(config-macl)# exit
console(config)# management access-class mlist
permit (management)
The permit Management Access-List Configuration mode command defines a permit rule.
Syntax
permit [ethernet interface-number | vlan vlan-id | port-channel port-channel-number.]
[service service]
permit ip-source ip-address [mask mask | prefix-length] [ethernet interface-number | vlan
vlan-id | port-channel port-channel-number.] [service service]
•
interface-number — A valid Ethernet port number.
•
vlan-id — A valid VLAN number.
port-channel-number. — A valid port channel number.
•
•
ip-address — Source IP address.(Range: Valid IP Address)
•
mask — Specifies the network mask of the source IP address. (Range: Valid subnet mask)
170
Management ACL
Advertisement
