
D-Link DES-3010FA/GA CLI Reference Guide
Page 145
deny (Management)
The
deny
Management Access-List Configuration mode command defines a deny rule.
Syntax
deny
[
ethernet
interface-number
|
vlan vlan-id
|
port-channel port-channel-number
]
deny ip-source
ip-address
[
mask
mask
|
prefix-length
] [
ethernet
interface-number
|
vlan
vlan-id
|
port-channel
port-channel-number
]
Parameters
•
interface-number
— A valid Ethernet port number.
•
vlan-id
— A valid VLAN number.
•
port-channel-number
— A valid port-channel number.
•
ip-address
— A valid source IP address.
•
mask
— A valid network mask of the source IP address.
•
mask
prefix-length
— Specifies the number of bits that comprise the source IP address prefix. The prefix
length must be preceded by a forward slash (/). (Range: 0-32)
Default Configuration
This command has no default configuration.
Command Mode
Management Access-list Configuration mode
User Guidelines
Rules with Ethernet, VLAN and port-channel parameters are valid only if an IP address is defined on the appropri-
ate interface.
The system supports up to 128 management access rules.
Example
The following example denies all ports in the access list called mlist.
Console(config)#
management access-list
mlist
Console(config-macl)#
deny