D-Link xStack DWS-3200 Series, Руководство CLI

Страница: 188 / 581

DXS/DWS-3200 series CLI Reference Guide
Page 185
Section 14. Management ACL Commands
management access-list
The management access-list Global Configuration mode command configures a management access list and
enters the Management Access-list Configuration command mode. To delete an access list, use the no form of
this command.
Syntax
management access-list name
no management access-list name
Parameters
•
name — Access list name. (Range: 1-32 characters)
Default Configuration
This command has no default configuration.
Command Mode
Global Configuration mode
User Guidelines
Use this command to configure a management access list. The command enters the Access-list Configuration
mode, where permit and deny access rules are defined using the
permit (Management) and
deny (Management) commands.
If no match criteria are defined, the default is deny.
If you reenter an access list context, the new rules are entered at the end of the access list.
Use the management access-class command to select the active access list.
The active management list cannot be updated or removed.
Management ACL requires a valid management interface, which is a port, VLAN, or port-channnel with an IP
address or console interface. Management ACL only restricts access to the device for management configuration
or viewing.
Example
The following example creates a management access list called ‘mlist’, configures management Ethernet
interfaces 1/1 and 2/9 and makes the new access list the active list.
Console(config)# management access-list mlist
Console(config-macl)# permit ethernet 1/1
Console(config-macl)# permit ethernet 2/9
Console(config-macl)# exit
Console(config)# management access-class mlist