39
Cisco Sx350 Ph. 2.2.5 Devices - Command Line Interface Reference Guide 816
Management ACL Commands
0
39.1 deny (Management)
To set permit rules (ACEs) for the management access list (ACL), use the deny
Management Access-list Configuration mode command.
Syntax
deny [
interface-id
] [service
service
]
deny ip-source {
ipv4-address
| i
pv6-address
/
ipv6-prefix-length
} [mask {
mask
|
prefix-length
}] [
interface-id
] [service
service
]
Parameters
• interface-id—(Optional) Specifies an interface ID. The interface ID can be
one of the following types: Ethernet port, Port-channel or VLAN
• service
service
—(Optional) Specifies the service type. Possible values are:
Telnet, SSH, HTTP, HTTPS and SNMP.
•
ipv4-address
—Specifies the source IPv4 address.
•
ipv6-address
/
ipv6-prefix-length
—Specifies the source IPv6 address and
source IPv6 address prefix length. The prefix length must be preceded by a
forward slash (/). The parameter is optional.
• mask
mask
—Specifies the source IPv4 address network mask. The
parameter is relevant only to IPv4 addresses.
• mask
prefix-length
—Specifies the number of bits that comprise the source
IPv4 address prefix. The prefix length must be preceded by a forward slash
(/). The parameter is relevant only to IPv4 addresses. (Range: 0–32)
Default Configuration
No rules are configured.