Cisco 300 Series

33
OL-32830-01 Command Line Interface Reference Guide 698
Management ACL Commands
0
33.1 deny (Management)
To set permit rules (ACEs) for the management access list (ACL), use the deny
Management Access-list Configuration mode command.
Syntax
deny
[interface-id] [service service]
deny ip-source {ipv4-address | ipv6-address/ipv6-prefix-length} [mask {mask |
prefix-length}] [interface-id] [service service]
Parameters
• interface-id—(Optional) Specifies an interface ID. The interface ID can be
one of the following types: Ethernet port, Port-channel or VLAN
• service service —(Optional) Specifies the service type. Possible values are:
Telnet, SSH, HTTP, HTTPS and SNMP.
• ipv4-address—Specifies the source IPv4 address.
• ipv6-address/ipv6-prefix-length—Specifies the source IPv6 address and
source IPv6 address prefix length. The prefix length must be preceded by a
forward slash (/). The parameter is optional.
• mask mask —Specifies the source IPv4 address network mask. The
parameter is relevant only to IPv4 addresses.
• mask prefix-length —Specifies the number of bits that comprise the source
IPv4 address prefix. The prefix length must be preceded by a forward slash
(/). The parameter is relevant only to IPv4 addresses. (Range: 0–32)
Default Configuration
No rules are configured.