
Management ACL Commands 87
Syntax
management access-list
name
no management access-list
name
•
name
—The access list name. (Range: 1 to 32 characters)
Default Configuration
This command has no default configuration.
Command Mode
Global Configuration mode
User Guidelines
This command enters the access-list configuration mode, where the denied or permitted
access conditions with the
deny
and
permit
commands must be defined.
If no match criteria are defined the default is
deny
.
If reentering to an access-list context, the new rules are entered at the end of the access-list.
Use the
management access-class
command to select the active access-list.
The active management list cannot be updated or removed.
Examples
The following example shows how to configure two management interfaces, Ethernet 1/g1
and Ethernet 2/g9.
console(config)#management access-list mlist
console(config-macal)# permit ethernet 1/g1 priority <1-64>
console(config-macal)# permit ethernet 2/g9 priority <1-64>
console(config-macal)# exit
console(config)#management access-class mlist
The following example shows how to configure all the interfaces to be management interfaces
except for two interfaces, Ethernet 1/g1 and Ethernet 2/g9.
console(config)# management access-list mlist
console(config-macal)# deny ethernet 1/g1 priority <1-64>
console(config-macal)# deny ethernet 2/g9 priority <1-64>
console(config-macal)# permit priority <1-64>
console(config-macal)# exit
console(config) # management access-class mlist
Commentaires sur ces manuels