Deny (Management) - Cisco 300 Series Cli Manual

11
192
Parameters
•
interface-id:—Specify an interface ID. The interface ID can be one of the
following types: Ethernet port, Port-channel or VLAN
•
service
service
SSH, HTTP, HTTPS and SNMP.
•
ipv4-address— Specifies the source IPv4 address.
•
ipv6-address/ipv6-prefix-length— Specifies the source IPv6 address and
source IPv6 address prefix length. The prefix length must be preceded by a
forward slash (/). The parameter is optional.
•
mask mask — Specifies the source IPv4 address network mask. This
parameter is relevant only to IPv4 addresses.
•
prefix-length
mask
IPv4 address prefix. The prefix length must be preceded by a forward slash
(/). This parameter is relevant only to IPv4 addresses. (Range: 0–32)
Default Configuration
No rules are configured.
Command Mode
Management Access-List Configuration mode
User Guidelines
Rules with Ethernet, VLAN, and port-channel parameters are valid only if an IP
address is defined on the appropriate interface.
Example
The following example permits all ports in the ACL called mlist
switchxxxxxx(config)#
switchxxxxxx(config-macl)#
11.3

deny (Management)

The deny Management Access-List Configuration mode command sets permit
rules (ACEs) for the management access list (ACL).
— Specifies the service type. Possible values are: Telnet,
— Specifies the number of bits that comprise the source
management access-list
permit
78-21075-01 Command Line Interface Reference Guide
Management ACL Commands
mlist