Dell PowerEdge VRTX - Manual (Page 162)

162 Management ACL Commands
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC
2+3\new_system_mifs_ARC2_latest\Management_ACL.fm
D E L L C O N F ID E N T IA L – P R E L IM I N A RY 4 / 3 /1 4 - FO R P R O O F O N LY
For IPv6 management traffic that is tunneled in IPv4 packets, the
management ACL is applied first on the external IPv4 header (rules with the
service field are ignored), and then again on the inner IPv6 header.
Example
Example 1 - The following example creates a management access list called
mlist, configures management gi0/1 and gi0/2, and makes the new access list
the active list.
console(config)# management access-list mlist
console(config-macl)# switchpermit gi0/1
console(config-macl)# switchpermit gi0/2
console(config-macl)# switchexit
console(config)# management access-class mlist
Example 2 - The following example creates a management access list called
‘mlist’, configures all interfaces to be management interfaces except gi0/1
and
gi0/2, and makes the new access list the active list.
console(config)# management access-list mlist
console(config-macl)# switchdeny gi0/1
console(config-macl)# switchdeny gi0/2
console(config-macl)# switchpermit
console(config-macl)# switchexit
console(config)# management access-class mlist
permit (Management)
The permit Management Access-list Configuration mode command sets
permit rules (ACEs) for the management access list (ACL).
Syntax
permit [interface-id] [service service]
permit ip-source { ipv4-address | ipv6-address / ipv6-prefix-length } [mask
{mask | prefix-length}] [interface-id] [service service]