D-Link DES-3010FA-TAA CLI Guide - Page 143

Management ACL Section 12. Management ACL management access-list The management access-list Global Configuration mode command configures a management access list and enters the Management Access-list Configuration command mode. To delete an access list, use the no form of this command. Syntax management access-list name no management access-list name Parameters • name - Access list name. (Range: 1-32 characters) Default Configuration This command has no default configuration. Command Mode Global Configuration mode User Guidelines Use this command to configure a management access list. The command enters the Access-list Configuration mode, where permit and deny access rules are defined using the permit (Management) and deny (Management) commands. If no match criteria are defined, the default is deny. If you reenter an access list context, the new rules are entered at the end of the access list. Use the management access-class command to select the active access list. The active management list cannot be updated or removed. Management ACL requires a valid management interface, which is a port, VLAN, or port-channnel with an IP address or console interface. Management ACL only restricts access to the device for management configuration or viewing. Examples The following example creates a management access list called mlist, configures management Ethernet interfaces 1 and 6 and makes the new access list the active list. Console(config)# management access-list mlist Console(config-macl)# permit ethernet 1 Console(config-macl)# permit ethernet 6 Console(config-macl)# exit Console(config)# management access-class mlist Page 142