Reference Guide

226 Management ACL
www.dell.com | support.dell.com
Examples
The following example creates a management access list called mlist, configures management
Ethernet interfaces 1/e1 and 2/e9 and makes the new access list the active list.
The following example creates a management access list called mlist, configures all interfaces to
be management interfaces except Ethernet interfaces 1/e1 and 2/e9 and makes the new access
list the active list.
permit (Management)
The permit Management Access-List Configuration mode command defines a permit rule.
Syntax
permit [ ethernet interface-number | vlan vlan-id | port-channel port-channel-number ]
[
service service ]
permit ip-source ip-address [ mask mask | prefix-length ] [ ethernet interface-number | vlan
vlan-id | port-channel port-channel-number ] [ service service ]
•
interface-number — A valid Ethernet port number.
•
vlan-id — A valid VLAN number.
•
port-channel-number — A valid port channel index.
•
ip-address — A valid source IP address.
•
mask — A valid network mask of the source IP address.
Console(config)# management access-list mlist
Console(config-macl)# permit ethernet 1/e1
Console(config-macl)# permit ethernet 2/e9
Console(config-macl)# exit
Console(config)# management access-class mlist
Console(config)# management access-list mlist
Console(config-macl)# deny ethernet 1/e1
Console(config-macl)# deny ethernet 2/e9
Console(config-macl)# permit
Console(config-macl)# exit
Console(config)# management access-class mlist