Management ACL 189
Management ACL

management access-list

The
management access-list
Global
Configuration mode command defines an access-list for
management, and enters the access-list for configuration. Once in the access-list configuration
mode, the denied or permitted access conditions are configured with the
deny
and
permit
commands. To remove an access list, use the
no
form of this command.
Syntax
management access-list
name
no management access-list
name
•
name
—The access list name using up to 32 characters.
Default Configuration
This command has no default configuration.
Command Mode
Global Configuration mode
User Guidelines
• This command enters the access-list configuration mode, where the denied or permitted
access conditions with the
deny
and
permit
commands must be defined.
• If no match criteria are defined the default is "deny".
• If reentering to an access-list context, the new rules are entered at the end of the access-list.
• Use the m
anagement access-class
command to select the active access-list.
• The active management list cannot be updated or removed.
• Management ACL requires a valid management interface (valid IFindex). A valid
management interface is an interface with an IP address. A valid (IFindex) management
interface can be a single port, vlan or port-channel. Management ACL only restricts access to
the device for management configuration or viewing.