Home » Dell Manuals » Hubs & Switches » Dell PowerConnect 3448 » Manual Viewer

Dell PowerConnect 3448 Command Line Interface (CLI) Guide (.htm) - Page 227

deny Manage

View all Dell PowerConnect 3448 manuals

Add to My Manuals
Save this manual to your list of manuals

Page 227 highlights

• prefix-length - Number of bits that comprise the source IP address prefix. The prefix length must be preceded by a forward slash (/). (Range: 0 - 32) • service - Service type. Possible values: telnet, ssh, http, https and snmp. Default Configuration If no permit rule is defined, the default is set to deny. Command Mode Management Access-list Configuration mode User Guidelines • Rules with Ethernet, VLAN and port-channel parameters are valid only if an IP address is defined on the appropriate interface. • The system supports up to 128 management access rules. Example The following example permits all ports in the mlist access list. Console(config)# management access-list mlist Console(config-macl)# permit deny (Management) The deny Management Access-List Configuration mode command defines a deny rule. Syntax deny [ethernet interface-number | vlan vlan-id | port-channel port-channel-number] [service service] deny ip-source ip-address [mask mask | prefix-length] [ethernet interface-number | vlan vlanid | port-channel port-channel-number] [service service] • interface-number - A valid Ethernet port number. • vlan-id - A valid VLAN number. • port-channel-number - A valid port-channel number. • ip-address - A valid source IP address. • mask - A valid network mask of the source IP address. • mask prefix-length - Specifies the number of bits that comprise the source IP address prefix. The prefix length must be preceded by a forward slash (/). (Range: 0-32) • service - Service type. Possible values: telnet, ssh, http, https and snmp. DELL CONFIDENTIAL - PRELIMINARY 9/13/06 - FOR PROOF ONLY Management ACL 227

Section	Page
CLI Reference Guide	23
Introduction	23
Command Groups	23
AAA Commands	25
ACL Commands	26
Address Table Commands	26
Clock Commands	28
Configuration and Image Files Commands	29
DHCP Filtering Commands	29
Ethernet Configuration Commands	29
GVRP Commands	31
IGMP Snooping Commands	31
IP Addressing	32
LACP Commands	33
LLDP Commands	34
Line Commands	35
Management ACL Commands	35
PHY Diagnostics Commands	36
Port Channel Commands	36
Port Monitor Commands	36
Power-over-Ethernet Commands	37
QoS Commands	37
Radius Commands	38
RMON Commands	38
SNMP Commands	39
Spanning Tree Commands	40
SSH Commands	41
Syslog Commands	42
System Management Commands	43
TACACS Commands	44
User Interface Commands	44
VLAN Commands	45
Web Server Commands	46
802.1x Commands	47
Command Modes	49
GC (Global Configuration) Mode	49
IC (Interface Configuration) Mode	53
LC (Line Configuration) Mode	56
MA (Management Access-level) Mode	56
MC (MST Configuration) Mode	57
ML (MAC Access-List) Mode	57
PE (Privileged EXEC) Mode	57
SP (SSH Public Key) Mode	60
UE (User EXEC) Mode	60
VC (VLAN Configuration) Mode	62
Using the CLI	63
CLI Command Modes	63
Introduction	63
User EXEC Mode	64
Privileged EXEC Mode	65
Global Configuration Mode	66
Interface Configuration Mode and Specific Configuration Modes	66
Starting the CLI	67
Editing Features	68
Setup Wizard	69
Terminal Command Buffer	69
Negating the Effect of Commands	70
Command Completion	70
Keyboard Shortcuts	70
CLI Command Conventions	71
AAA Commands	73
aaa authentication login	73
Syntax	73
Default Configuration	73
Command Mode	73
User Guidelines	74
Example	74
aaa authentication enable	74
Syntax	74
Default Configuration	75
Command Mode	75
User Guidelines	75
Example	75
login authentication	75
Syntax	76
Default Configuration	76
Command Mode	76
User Guidelines	76
Example	76
enable authentication	76
Syntax	76
Default Configuration	76
Command Mode	77
User Guidelines	77
Example	77
ip http authentication	77
Syntax	77
Default Configuration	77
Command Mode	77
User Guidelines	78
Example	78
ip https authentication	78
Syntax	78
Default Configuration	78
Command Mode	78
User Guidelines	78
Example	79
show authentication methods	79
Syntax	79
Default Configuration	79
Command Mode	79
User Guidelines	79
Example	79
password	80
Syntax	80
Default Configuration	80
Command Mode	80
User Guidelines	80
Example	80
enable password	81
Syntax	81
Default Configuration	81
Command Mode	81
User Guidelines	81
Example	81
username	81
Syntax	81
Default Configuration	82
Command Mode	82
User Guidelines	82
Example	82
passwords min-length	82
Syntax	82
Default Configuration	82
Command Mode	82
User Guidelines	82
Example	83
passwords aging	83
Syntax	83
Default Configuration	83
Command Mode	83
User Guidelines	83
Example	84
password-aging	84
Syntax	84
Default Configuration	84
Command Mode	84
User Guidelines	84
Example	84
passwords history	85
Syntax	85
Default Configuration	85
Command Mode	85
User Guidelines	85
Example	85
passwords history hold-time	85
Syntax	86
Default Configuration	86
Command Mode	86
User Guidelines	86
Example	86
passwords lockout	86
Syntax	86
Default Configuration	86
Command Mode	86
User Guidelines	87
Example	87
aaa login-history file	87
Syntax	87
Default Configuration	87
Command Mode	87
User Guidelines	87
Example	87
set username active	88
Syntax	88
Default Configuration	88
Command Mode	88
User Guidelines	88
Example	88
set line active	88
Syntax	88
Default Configuration	88
Command Mode	88
User Guidelines	89
Example	89
set enable-password active	89
Syntax	89
Default Configuration	89
Command Mode	89
User Guidelines	89
Example	89
show passwords configuration	89
Syntax	89
Default Configuration	89
Command Mode	90
User Guidelines	90
Example	90
show users login-history	91
Syntax	91
Default Configuration	91
Command Mode	91
User Guidelines	91
Example	92
show users accounts	92
Syntax	92
Default Configuration	92
Command Mode	92
User Guidelines	92
Example	93
ACL Commands	95
mac access-list	95
Syntax	95
Default Configuration	95
Command Mode	95
User Guidelines	95
Example	95
deny (MAC)	95
Syntax	95
Default Configuration	96
Command Mode	96
User Guidelines	96
Example	96
service-acl	96
Syntax	96
Default Configuration	96
Command Mode	96
User Guidelines	96
Example	97
show access-lists	97
Syntax	97
Default Configuration	97
Command Mode	97
User Guidelines	97
Examples	97
show interfaces access-lists	97
Syntax	97
Default Configuration	98
Command Mode	98
User Guidelines	98
Examples	98
Address Table Commands	99
bridge address	99
Syntax	99
Default Configuration	99
Command Mode	99
User Guidelines	99
Example	100
bridge multicast filtering	100
Syntax	100
Default Configuration	100
Command Mode	100
User Guidelines	100
Example	100
bridge multicast address	101
Syntax	101
Default Configuration	101
Command Mode	101
User Guidelines	101
Examples	101
bridge multicast forbidden address	102
Syntax	102
Default Configuration	102
Command Modes	102
User Guidelines	102
Examples	103
bridge multicast forward-all	103
Syntax	103
Default Configuration	103
Command Mode	103
User Guidelines	103
Example	104
bridge multicast forbidden forward-all	104
Syntax	104
Default Configuration	104
Command Mode	104
User Guidelines	104
Example	105
bridge aging-time	105
Syntax	105
Default Configuration	105
Command Mode	105
User Guidelines	105
Example	105
clear bridge	105
Syntax	105
Default Configuration	105
Command Mode	106
User Guidelines	106
Example	106
port security	106
Syntax	106
Default Configuration	106
Command Mode	106
User Guidelines	106
Example	107
port security mode	107
Syntax	107
Default Configuration	107
Command Mode	107
User Guidelines	107
Example	107
port security max	108
Syntax	108
Default Configuration	108
Command Mode	108
User Guidelines	108
Example	108
port security routed secure-address	108
Syntax	108
Default Configuration	109
Command Mode	109
User Guidelines	109
Example	109
show bridge address-table	109
Syntax	109
Default Configuration	109
Command Mode	109
User Guidelines	110
Example	110
show bridge address-table static	110
Syntax	110
Default Configuration	110
Command Mode	110
User Guidelines	111
Example	111
show bridge address-table count	111
Syntax	111
Default Configuration	111
Command Mode	111
User Guidelines	111
Example	112
show bridge multicast address-table	112
Syntax	112
Default Configuration	112
Command Mode	112
User Guidelines	112
Example	113
show bridge multicast filtering	114
Syntax	114
Default Configuration	114
Command Mode	114
User Guidelines	114
Example	114
show ports security	115
Syntax	115
Default Configuration	115
Command Mode	115
User Guidelines	115
Example	115
show ports security addresses	116
Syntax	116
Default Configuration	116
Command Mode	116
User Guidelines	116
Example	117
Clock	119
clock set	119
Syntax	119
Default Configuration	119
Command Mode	119
User Guidelines	119
Example	119
clock source	119
Syntax	120
Default Configuration	120
Command Mode	120
User Guidelines	120
Examples	120
clock timezone	120
Syntax	120
Default Configuration	120
Command Mode	120
User Guidelines	121
Examples	121
clock summer-time	121
Syntax	121
Default Configuration	122
Command Mode	122
User Guidelines	122
Examples	122
sntp authentication-key	123
Syntax	123
Default Configuration	123
Command Mode	123
User Guidelines	123
Examples	123
sntp authenticate	123
Syntax	123
Default Configuration	123
Command Mode	123
User Guidelines	124
Examples	124
sntp trusted-key	124
Syntax	124
Default Configuration	124
Command Mode	124
User Guidelines	124
Examples	124
sntp client poll timer	125
Syntax	125
Default Configuration	125
Command Mode	125
User Guidelines	125
Examples	125
sntp broadcast client enable	125
Syntax	125
Default Configuration	125
Command Mode	125
User Guidelines	126
Examples	126
sntp anycast client enable	126
Syntax	126
Default Configuration	126
Command Mode	126
User Guidelines	126
Examples	126
sntp client enable (Interface)	126
Syntax	127
Default Configuration	127
Command Mode	127
User Guidelines	127
Examples	127
sntp unicast client enable	127
Syntax	127
Default Configuration	127
Command Mode	127
User Guidelines	128
Examples	128
sntp unicast client poll	128
Syntax	128
Default Configuration	128
Command Mode	128
User Guidelines	128
Examples	128
sntp server	129
Syntax	129
Default Configuration	129
Command Mode	129
User Guidelines	129
Examples	129
show clock	130
Syntax	130
Default Configuration	130
Command Mode	130
User Guidelines	130
Example	131
show sntp configuration	131
Syntax	131
Default Configuration	131
Command Mode	131
User Guidelines	132
Examples	132
show sntp status	132
Syntax	132
Default Configuration	132
Command Mode	133
User Guidelines	133
Examples	133
Configuration and Image Files	135
copy	135
Syntax	135
Default Configuration	136
Command Mode	136
User Guidelines	136
Example	138
delete	138
Default Configuration	138
Command Mode	138
User Guidelines	138
Examples	139
delete startup-config	139
Default Configuration	139
Command Mode	139
User Guidelines	139
Examples	139
dir	139
Default Configuration	139
Command Mode	139
User Guidelines	139
Examples	140
more	140
Default Configuration	141
Command Mode	141
User Guidelines	141
Example	142
rename	142
Syntax	142
Default Configuration	143
Command Mode	143
User Guidelines	143
Examples	143
boot system	143
Syntax	143
Default Configuration	143
Command Mode	143
User Guidelines	143
Examples	143
show running-config	144
Syntax	144
Default Configuration	144
Command Mode	144
User Guidelines	144
Examples	144
show startup-config	145
Syntax	145
Default Configuration	145
Command Mode	145
User Guidelines	145
Examples	145
show bootvar	146

Match case Limit results 1 per page

Management ACL

227

DELL CONFIDENTIAL – PRELIMINARY 9/13/06 – FOR PROOF ONLY

•

prefix-length

— Number of bits that comprise the source IP address prefix. The prefix

length must be preceded by a forward slash (/). (Range: 0 - 32)

•

service

— Service type. Possible values:

telnet

ssh

http,

https

and

snmp

Default Configuration

If no permit rule is defined, the default is set to deny

Command Mode

Management Access-list Configuration mode

User Guidelines

•

Rules with Ethernet, VLAN and port-channel parameters are valid only if an IP address is

defined on the appropriate interface.

•

The system supports up to 128 management access rules.

Example

The following example permits all ports in the mlist access list.

deny (Manage

ent)

The

deny

Management Access-List Configuration mode command defines a deny rule.

Syntax

deny

[

ethernet

interface-number

vlan

vlan-id

port-channel

port-channel-number

] [

service

]

deny ip-source

ip-address

[

mask

prefix-length

] [

ethernet

interface-number

vlan

vlan-

port-channel

port-channel-number

] [

service

]

•

interface-number

— A valid Ethernet port number.

•

vlan-id

— A valid VLAN number.

•

port-channel-number

— A valid port-channel number.

•

ip-address

— A valid source IP address.

•

mask

— A valid network mask of the source IP address.

•

mask

prefix-length

— Specifies the number of bits that comprise the source IP address

prefix. The prefix length must be preceded by a forward slash (/). (Range: 0-32)

•

service

— Service type. Possible values:

telnet

ssh

http,

https

and

snmp

Console(config)#

management access-list

mlist

Console(config-macl)#

permit