5000 Series Layer 2/3 Managed Data Center Switch CLI Reference Guide
1218
MACALs can be applied only to in-band ports and cannot be applied to the service port.
12-88 management access-list
Use this command to create a management access list and to enter access-list configuration mode,
where you must define the denied or permitted access conditions with the deny and permit commands. If
no match criteria are defined, the default is deny. If you reenter to an access-list context, the new rules
would be entered at the end of the access-list. Use the
management access-class
command to choose
the active access-list. The active management list cannot be updated or removed. The
name
value can
be up to 32 characters.
Use the
no
command to delete the management ACAL identified by name from the system.
management access-list name
no management access-list name
Parameters
name
Enter access-list name up to 31 characters in length.
Default
The default is None.
Command Mode
Global Config
12-89 {deny | permit} (Management ACAL)
This command creates a new rule for the current management access control access list (ACAL). A rule
may either deny or permit traffic according to the specified classification fields. Rules with
ethernet
,
vlan
and
port-channel
parameters will be valid only if an IP address is defined on the appropriate interface.
Each rule should have a unique priority.
{deny | permit} [ethernet interface-number | vlan vlan-id | port-channel number] [service service]
[priority priority-value]
{deny | permit} ip-source ip-address [mask mask | prefix-length] [ethernet interface-number | vlan
vlan-id | port-channel number] [service service] [priority priority-value]
Parameters
deny
Enter to specific traffic rule to deny.
permit
Enter to specific traffic rule to permit.
ip-source ip-address
Source IP address.
mask mask
(Optional) The network mask of the source IP address (0-32).
prefix-length
(Optional) The number of bits that comprise the source IP address
