2 permit (management), 3 deny (management), Syntax – Planet Technology WGSD-8000 User Manual

Page 244: Default configuration, Command mode, User guidelines, Example

Advertising
background image

User’s Manual of WGSD-1022/WGSD-8000

- 244 –

5.13.2 permit (management)

The permit management access-list configuration command defines a permit rule.

Syntax

permit

[ethernet interface-number | vlan vlan-id | port-channel number | out-of-band-eth oob-interface] [service service]

permit ip-source ip-address

[mask mask | prefix-length] [ethernet interface-number | vlan vlan-id | port-channel number |

out-of-band-eth oob-interface

] [service service]

ƒ

ethernet interface-number — A valid Ethernet port number.

ƒ

vlan vlan-id — A valid VLAN number.

ƒ

port-channel number — A valid port channel number.

ƒ

ip-address — Source IP address.(Range: Valid IP Address)

ƒ

mask mask — Specifies the network mask of the source IP address. (Range: Valid subnet mask)

ƒ

mask prefix-length — Specifies the number of bits that comprise the source IP address prefix. The prefix length must be

preceded by a forward slash (/). (Range: 0 - 32)

ƒ

service service — Indicates service type. Can be one of the following: telnet, ssh, http, https or snmp.

ƒ

out-of-band-eth oob-interface — Out of band ethernet port number.

Default Configuration

This command has no default configuration.

Command Mode

Management Access-list Configuration mode

User Guidelines

Rules with Ethernet, VLAN and port-channel parameters are valid only if an IP address is defined on the appropriate

interface.The system supports up to 256 management access rules.

Example

The following example shows how all ports are permitted in the access-list called "mlist".

Console (config)# management access-list mlist

Console (config-macl)# permit

5.13.3 deny (management)

The deny management access-list configuration command defines a deny rule.

Syntax

deny

[ethernet interface-number | vlan vlan-id | port-channel number ] [service service]

Advertising