962 Management ACL Commands
The following example shows how to configure all the interfaces to be management interfaces
except for two interfaces, Ethernet 1/g1 and Ethernet 2/g9.
console(config)# management access-list mlist
console(config-macl)# deny ethernet 1/g1 priority <1-64>
console(config-macl)# deny ethernet 2/g9 priority <1-64>
console(config-macl)# permit priority <1-64>
console(config-macl)# exit
console(config) # management access-class mlist
permit (management)
Use the permit command in Management Access-List configuration mode to set conditions for
the management access list.
Syntax
permit ip-source
ip-address
[ mask
mask
|
prefix-length
] [ethernet
interface-number
| vlan
vlan-id
|port-channel
number
] [ service
service
] [ priority
priority-value
]
permit { ethernet
interface-number
| vlan
vlan-id
| port-channel
number
} [service
service
]
[priority
priority-value
]
permit service
service
[priority
priority-value
]
permit priority
priority-value
•
ethernet
interface-number
— A valid routed port number.
•
vlan
vlan-id
— A valid VLAN number.
•
port-channel
number
— A valid port channel number.
•
ip-address
— Source IP address.
•
mask
mask
— Specifies the network mask of the source IP address.
•
mask
prefix-length
— Specifies the number of bits that comprise the source IP address prefix.
The prefix length must be preceded by a forward slash (/). (Range: 0–32)
•
service
service
— Indicates service type. Can be one of the following: telnet, ssh, http, https,
tftp, snmp, or sntp.
•
priority
priority-value
— Priority for the rule. (Range: 1 – 64)
Default Configuration
This command has no default configuration.