152
Management ACL Commands
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Contax
CLI\files\Management_ACL.fm
D E L L C O N F ID E N T IA L – P R E L IM I N A RY 5 / 1 5 /1 2 - F O R P R O O F O N LY
For IPv6 management traffic that is tunneled in IPv4 packets, the
management ACL is applied first on the external IPv4 header (rules with
service field are ignored), and then again on the inner IPv6 header.
Example
The following example creates a management access list called
mlist
,
configures management gigabitethernet
interfaces 1/0/1 and 1/0/9, and
makes the new access list the active list.
Console(config)#
management access-list
mlist
Console(config-macl)#
permit
gi1/0/1
Console(config-macl)#
permit
gi1/0/9
Console(config-macl)#
exit
Console(config)#
management access-class
mlist
The following example creates a management access list called ‘mlist’,
configures all interfaces to be management interfaces except
gigabitethernet interfaces 1/0/1 and 1/0/9
, and makes the new
access list the active list.
Console(config)#
management access-list
mlist
Console(config-macl)#
deny
gigabitethernet 1/0/1
Console(config-macl)#
deny
gigabitethernet 1/0/9
Console(config-macl)#
permit
Console(config-macl)#
exit
Console(config)#
management access-class
mlist
permit (Management)
The
permit
Management
Access-List Configuration mode command sets
conditions for the management access list.
Syntax
permit
[interface-id] [service service]
permit ip-source
{
ipv4-address
|
ipv6-address
/
ipv6-prefix-length
}
[mask
{mask | prefix-length}] [interface-id] [service service]
