Security Commands 1038
• service service — Indicates service type. Can be one of the following:
telnet, ssh, http, https, tftp, snmp, sntp, or any. The any keyword indicates
that the service match for the ACL is effectively “don’t care”.
• priority priority — Priority for the rule. (Range: 1–64)
Default Configuration
This command has no default configuration.
Command Mode
Management Access-list Configuration mode
User Guidelines
Rules with gigabitethernet, tengigabitethernet, fortygigabitethernet, vlan,
and port-channel parameters are valid only if an IP address is defined on the
appropriate interface. Ensure that each rule has a unique priority.
Example
The following example shows how all ports are denied in the access-list called
mlist.
console(config)# management access-list mlist
console(config-macal)# deny
management access-class
Use the management access-class command in Global Configuration mode
to restrict switch management connections. To disable any restrictions, use
the no form of this command.
Syntax
management access-class {console-only | name}
no management access-class
• name — A valid access-list name. (Range: 1–32 characters)
• console-only — The switch can be managed only from the console.
To Next Page
Loading...
