Table of Contents
Advertisement
5.13 Management ACL Commands
5.13.1 management access-list
The management access-list configuration command defines an access-list for management, and
enters the access-list for configuration. Once in the access-list configuration mode, the denied or
permitted access conditions are configured with the deny and permit commands. To remove an access
list, use the no form of this command.
Syntax
management access-list name
no management access-list name
name — The access list name using up to 32 characters.
Default Configuration
This command has no default configuration.
Command Mode
Global Configuration mode
User Guidelines
This command enters the access-list configuration mode, where the denied or permitted access
conditions with the deny and permit commands must be defined.
If no match criteria are defined the default is "deny".
If reentering to an access-list context, the new rules are entered at the end of the access-list.
Use the management access-class command to select the active access-list.
The active management list cannot be updated or removed.
Examples
The following example shows how to create an access-list called "mlist", configure two management
interfaces ethernet g1 and ethernet g9, and make the access-list the active list.
Console (config)# management access-list mlist
Console (config-macl)# permit ethernet g1
Console (config-macl)# permit ethernet g2
Console (config-macl)# exit
Console (config)# management access-class mlist
The following example shows how to create an access-list called "mlist", configure all interfaces to be
management interfaces except interfaces ethernet g1 and ethernet g9, and make the access-list the
active list.
Advertisement
Table of Contents
