Specifications
ip access-group
24
ip access-group
Sets the access list that specifies the IPv4 addresses of the remote operation terminals for
which remote login to the Switch is to be permitted or denied is set. This setting is common
to all types of remote access (Telnet or FTP).
Multiple lines for no more than 16 entries can be set.
Syntax
To set or change information:
ip access-group <ACL ID> in
To delete information:
no ip access-group <ACL ID>
Input mode
(config-line)
Parameters
<ACL ID>
Specifies an IPv4 address filter identifier (identifier for
ip access-list standard).
1. Default value when this parameter is omitted:
This parameter cannot be omitted.
2. Range of values:
Specify an access list name that is 3 to 31 characters.
For details about the characters that can be specified, see Specifiable values
for parameters.
Default behavior
Access from all remote operation terminals is permitted.
Impact on communication
None
When the change is applied
The change is applied immediately after setting values are changed.
Notes
1. This setting is common to all types of remote access (Telnet or FTP).
2. To allow FTP connections, set
ftp-server in config mode.
3. When
ip access-group is not set, access from all remote operation terminals is
permitted.
4. Note that changing the registered IP addresses does not close the sessions of users
who have already logged in. The change is applied to users who will log in after this
setting.
Related commands
ip access-list standard
line vty