Filter
Top Products
Management ACL Commands 1417
Management access list names can consist of any printable character,
including blanks. Enclose the name in quotes to embed blanks in the name.
Examples
The following example shows how to configure two management interfaces,
gigabit Ethernet 1/0/1 and gigabit Ethernet 2/0/9.
console(config)#management access-list mlist
console(config-macal)# permit gigabitethernet 1/0/1 priority 1
console(config-macal)# permit gigabitethernet 2/0/9 priority 1
console(config-macal)# exit
console(config)#management access-class mlist
The following example shows how to configure all the interfaces to be
management interfaces except for two interfaces, gigabit Ethernet 1/0/1 and
gigabit Ethernet 2/0/9.
console(config)# management access-list mlist
console(config-macal)# deny gigabitethernet 1/0/1 priority 1
console(config-macal)# deny gigabitethernet 2/0/9 priority 2
console(config-macal)# permit priority 2
console(config-macal)# exit
console(config) # management access-class mlist
permit (management)
Use the permit command in Management Access-List configuration mode to
set conditions for the management access list.
Syntax
permit ip-source
ip-address
[mask
mask
|
prefix-length
] [gigabitethernet
unit/slot/port
| vlan
vlan-id
|
port-channel
port-channel-number
|
tengigabitethernet
unit/slot/port
] [ service
service
] [ priority
priority-value
]
permit {gigabitethernet
unit/slot/port
| vlan
vlan-id
|
port-channel
port-
channel-number
| tengigabitethernet
unit/slot/port
} [service
service
]
[priority
priority-value
]
permit service
service
[priority
priority-value
]
permit priority
priority-value
2CSPC4.XCT-SWUM2XX1.book Page 1417 Monday, October 3, 2011 11:05 AM