Home » Dell Manuals » Hubs & Switches » Dell PowerConnect 5424 » Manual Viewer

Dell PowerConnect 5424 Command Line Interface Guide - Page 271

permit (management), management access-list, permit

View all Dell PowerConnect 5424 manuals

Add to My Manuals
Save this manual to your list of manuals

Page 271 highlights

permit (management) The permit Management Access-List Configuration mode command defines a permit rule. Syntax • permit [ethernet interface-number | vlan vlan-id | port-channel number] [service service] • permit ip-source {ipv4-address | ipv6-address/prefix-length} [mask mask | prefix-length] [ethernet interface-number | vlan vlan-id | port-channel number] [service service] • ethernet interface-number - A valid Ethernet port number. • vlan vlan-id - A valid VLAN number. • port-channel number - A valid port channel number. • ipv4-address - Source IPv4 address. • ipv6-address/prefix-length - Source IPv6 address and prefix length. The prefix length is optional. • mask mask - Specifies the network mask of the source IPv4 address. The parameter is relevant only to IPv4 addresses. (Range: Valid subnet mask) • mask prefix-length - Specifies the number of bits that comprise the source IPv4 address prefix. The prefix length must be preceded by a forward slash (/). The parameter is relevant only to IPv4 addresses. (Range: 0 - 32) • service service - Indicates service type. Can be one of the following: telnet, ssh, http, https or snmp. Default Configuration If no permit statement is present, the default is set to deny. Command Mode Management Access-list Configuration mode. User Guidelines • Rules with Ethernet, VLAN and port-channel parameters are valid only if an IP address is defined on the appropriate interface.The system supports up to 256 management access rules. Example The following example shows how all ports are permitted in the Access-List called 'mlist'. Console (config)# management access-list mlist Console (config-macl)# permit Management ACL 271

Section	Page
Using the CLI	25
CLI Command Modes	25
Starting the CLI	28
Editing Features	29
Setup Wizard	30
Command Groups	33
Introduction	33
Command Groups	33
ACL Commands	35
AAA Commands	35
Address Table Commands	36
Clock Commands	37
Configuration and Image Files Commands	38
DHCP Snooping Commands	39
Ethernet Configuration Commands	39
GVRP Commands	41
IGMP Snooping Commands	41
IP Addressing Commands	42
IPv6 Addressing Commands	43
iSCSI Commands	44
LACP Commands	44
Line Commands	44
LLDP Commands	45
Login Banner Commands	46
Management ACL Commands	46
PHY Diagnostics Commands	47
Port Channel Commands	47
Port Monitor Commands	48
QoS Commands	48
RADIUS Commands	49
RMON Commands	49
SNMP Commands	50
Spanning Tree Commands	51
SSH Commands	53
Syslog Commands	53
System Management Commands	54
TACACS Commands	55
TIC Commands	55
Tunnel Commands	56
User Interface Commands	57
VLAN Commands	57
Voice VLAN Commands	59
Web Server Commands	59
802.1x Commands	60
802.1x Advanced Commands	62
Command Modes	63
GC (Global Configuration) Mode	63
IC (Interface Configuration) Mode	67
LC (Line Configuration) Mode	70
MA (Management Access-level) Mode	70
PE (Privileged User EXEC) Mode	70
SP (SSH Public Key) Mode	72
UE (User EXEC) Mode	73
VC (VLAN Configuration) Mode	74
ACL Commands	75
ip access-list	75
mac access-list	75
permit (ip)	76
deny (IP)	78
permit (MAC)	80
deny (MAC)	81
service-acl	82
show access-lists	83
show interfaces access-lists	84
AAA Commands	85
aaa authentication login	85
aaa authentication enable	86
login authentication	87
enable authentication	88
ip http authentication	89
ip https authentication	89
show authentication methods	90
password	92
enable password	92
username	93
show users accounts	94
Address Table Commands	95
bridge address	95
bridge multicast filtering	96
bridge multicast address	97
bridge multicast forbidden address	98
bridge multicast unregistered	99
bridge multicast forward-all	100
bridge multicast forbidden forward-all	100
bridge aging-time	101
clear bridge	102
port security	103
port security mode	103
port security max	104
port security routed secure-address	105
show bridge address-table	106
show bridge address-table static	107
show bridge address-table count	108
show bridge multicast address-table	109
show bridge multicast filtering	110
show ports security	111
show ports security addresses	113
Login Banner	115
banner exec	115
banner login	116
banner motd	118
exec-banner	119
login-banner	120
motd-banner	121
show banner	121
Clock	123
clock set	123
clock source	123
clock timezone	124
clock summer-time	125
sntp authentication-key	126
sntp authenticate	127
sntp trusted-key	128
sntp client poll timer	129
sntp broadcast client enable	129
sntp anycast client enable	130
sntp client enable	131
sntp client enable (interface)	131
sntp unicast client enable	132
sntp unicast client poll	133
sntp server	133
show clock	135
show sntp configuration	136
show sntp status	138
Configuration and Image Files	139
dir	139
more	140
rename	141
delete startup-config	142
copy	143
delete	146
boot system	146
show running-config	147
show startup-config	148
show bootvar	150
Ethernet Configuration Commands	151
interface ethernet	151
interface range ethernet	151
shutdown	152
description	153
speed	154
duplex	154
negotiation	155
flowcontrol	156
system flowcontrol	157
mdix	157
back-pressure	158
port jumbo-frame	159
clear counters	159
set interface active	160
show interfaces configuration	160
show interfaces status	162
show interfaces advertise	165
show interfaces description	167
show interfaces counters	168
show ports jumbo-frame	172
port storm-control include-multicast	173
port storm-control broadcast enable	173
port storm-control broadcast rate	174
show ports storm-control	175
show system flowcontrol	176
DHCP Snooping	179
ip dhcp snooping	179
ip dhcp snooping vlan	179
ip dhcp snooping trust	180
ip dhcp snooping information option allowed-untrusted	180
ip dhcp snooping verify	181
ip dhcp snooping database	182
ip dhcp snooping database update-freq	182
ip dhcp snooping binding	183
clear ip dhcp snooping database	184
show ip dhcp snooping	184
show ip dhcp snooping binding	185
GVRP Commands	187
gvrp enable (global)	187
gvrp enable (interface)	187
garp timer	188
gvrp vlan-creation-forbid	189
gvrp registration-forbid	190
clear gvrp statistics	191
show gvrp configuration	191
show gvrp statistics	192
IGMP Snooping Commands	195
ip igmp snooping (Global)	195
ip igmp snooping (Interface)	195
ip igmp snooping mrouter	196
ip igmp snooping host-time-out	197
ip igmp snooping mrouter-time-out	197
ip igmp snooping leave-time-out	198
ip igmp snooping querier enable	199
ip igmp snooping querier address	200
show ip igmp snooping mrouter	200
show ip igmp snooping interface	201
show ip igmp snooping groups	202
IP Addressing Commands	205
clear host dhcp	205
ip address	205
ip address dhcp	206
ip default-gateway	207
show ip interface	208
arp	209
arp timeout	210
clear arp-cache	210
show arp	211
ip domain-lookup	212
ip domain-name	213
ip name-server	213
ip host	214
clear host	215
show hosts	215
IPv6 Addressing	217
ipv6 enable	217
ipv6 address autoconfig	218
ipv6 icmp error-interval	218
show ipv6 icmp error-interval	219
ipv6 address	220
ipv6 address link-local	221
ipv6 unreachables	222
ipv6 default-gateway	222
ipv6 mld join-group	223
ipv6 mld version	224
show ipv6 interface	225
show ipv6 route	227
ipv6 nd dad attempts	228
ipv6 host	229
ipv6 neighbor	230
ipv6 set mtu	231
show ipv6 neighbors	232
clear ipv6 neighbors	234
iSCSI Commands	235
iscsi enable	235
iscsi target port	235
iscsi cos	237
iscsi aging time	237
iscsi max connections	238
show iscsi	239
show iscsi sessions	240
LACP Commands	243
lacp system-priority	243
lacp port-priority	243
lacp timeout	244
show lacp ethernet	245
show lacp port-channel	245
Line Commands	247
line	247
autobaud	248
show line	250
terminal history	250
terminal history size	251
LLDP Commands	253
lldp enable (global)	253
lldp enable (interface)	253
lldp timer	254
lldp hold-multiplier	255
lldp reinit-delay	256
lldp tx-delay	256
lldp optional-tlv	257
lldp management-address	258
lldp med enable	259
lldp med network-policy (global)	259
lldp med network-policy (interface)	260
lldp med location	261
clear lldp rx	262
show lldp configuration	262
show lldp local	263
show lldp neighbors	265
show lldp med configuration	266
Management ACL	269
management access-list	269
permit (management)	271
deny (management)	272
management access-class	273
show management access-list	273
show management access-class	274
PHY Diagnostics Commands	275
test copper-port tdr	275
show copper-ports tdr	275
show copper-ports cable-length	276
show fiber-ports optical-transceiver	277
Port Channel Commands	281
interface port-channel	281
interface range port-channel	281
channel-group	282
port-channel load-balance	283
show interfaces port-channel	284
Port Monitor Commands	285
port monitor	285
show ports monitor	286
QoS Commands	289
qos	289
show qos	289
wrr-queue cos-map	290
wrr-queue bandwidth	291
priority-queue out num-of-queues	292
traffic-shape	293
rate-limit (Ethernet)	293
show qos interface	294
qos map dscp-queue	296
qos trust (Global)	296
qos trust (Interface)	297
qos cos	298
show qos map	298
Radius Commands	301
radius-server host	301
radius-server key	302
radius-server retransmit	303
radius-server source-ip	304
radius-server source-ipv6	304
radius-server timeout	305
radius-server deadtime	306
show radius-servers	306
RMON Commands	309
show rmon statistics	309
rmon collection history	311
show rmon collection history	312
show rmon history	314
rmon alarm	317
show rmon alarm-table	318
show rmon alarm	319
rmon event	321
show rmon events	322
show rmon log	323
rmon table-size	325
SNMP Commands	327
snmp-server community	327
snmp-server view	328
snmp-server filter	329
snmp-server contact	330
snmp-server location	331
snmp-server enable traps	331
snmp-server trap authentication	332
snmp-server host	332
snmp-server set	334
snmp-server group	335
snmp-server user	336
snmp-server v3-host	337
snmp-server engineID local	339
show snmp engineid	341
show snmp	341
show snmp views	342
show snmp groups	343
show snmp filters	344
show snmp users	345
Spanning-Tree Commands	347
spanning-tree	347
spanning-tree mode	347
spanning-tree forward-time	348
spanning-tree hello-time	349
spanning-tree max-age	350
spanning-tree priority	350
spanning-tree disable	351
spanning-tree cost	352
spanning-tree port-priority	352
spanning-tree portfast	353
spanning-tree link-type	354
spanning-tree mst priority	354
spanning-tree mst max-hops	355
spanning-tree mst port-priority	356
spanning-tree mst cost	356
spanning-tree mst configuration	357
instance (mst)	358
name (mst)	359
revision (mst)	359
show (mst)	360
exit (mst)	361
abort (mst)	361
spanning-tree pathcost method	362
spanning-tree bpdu	362
clear spanning-tree detected-protocols	363
show spanning-tree	364
Spanning-tree guard root	376
SSH Commands	377
ip ssh port	377
ip ssh server	377
crypto key generate dsa	378
crypto key generate rsa	379
ip ssh pubkey-auth	379
crypto key pubkey-chain ssh	380
user-key	380
key-string	381
show ip ssh	382
show crypto key mypubkey	384
show crypto key pubkey-chain ssh	385
Syslog Commands	387
logging on	387
logging	387
logging console	389
logging buffered	389
logging buffered size	390
clear logging	391
logging file	391
clear logging file	392
aaa logging	392
file-system logging	393
management logging	394
show logging	394
show logging file	396
show syslog-servers	398
System Management	401
ping	401
traceroute	403
telnet	405
resume	408
reload	409
hostname	409
service cpu-utilization	410
show cpu utilization	411
show users	411
show sessions	412
show system	413
set system	414
show system mode	415
show version	415
asset-tag	416
show system id	417
TACACS Commands	419
tacacs-server host	419
tacacs-server key	420
tacacs-server timeout	420
tacacs-server source-ip	421
show tacacs	422
TIC Commands	423
passwords min-length	423
password-aging	424
passwords aging	424
passwords history	425
passwords history hold-time	426
passwords lockout	426
aaa login-history file	427
set username active	428
set line active	428
set enable-password active	429
show passwords configuration	429
show users login-history	431
Tunnel	433
interface tunnel	433
tunnel mode ipv6ip	433
tunnel isatap router	434
tunnel source	435
tunnel isatap query-interval	436
tunnel isatap solicitation-interval	436
tunnel isatap robustness	437
show ipv6 tunnel	438
User Interface	441
enable	441
disable	441
login	442
configure	443
exit(configuration)	443
exit(EXEC)	444
end	444
help	445
history	445
terminal datadump	446
history size	447
debug-mode	447
show history	448
show privilege	449
do	449
VLAN Commands	451
vlan database	451
vlan	451
interface vlan	452
interface range vlan	453
name	453
switchport access vlan	454
switchport trunk allowed vlan	455
switchport trunk native vlan	455
switchport general allowed vlan	456
switchport general pvid	457
switchport general ingress-filtering disable	458
switchport general acceptable-frame-type tagged-only	458
switchport forbidden vlan	459
switchport mode	460
switchport customer vlan	460
map protocol protocols-group	461
switchport general map protocols-group vlan	462
switchport protected	463
ip internal-usage-vlan	463
show vlan	464
show vlan internal usage	465
show vlan protocols-groups	466
show interfaces switchport	467
Voice VLAN	469
voice vlan id	469
voice vlan oui-table	469
voice vlan cos	471
voice vlan aging-timeout	471
voice vlan enable	472
voice vlan secure	473
show voice vlan	473
Web Server	477
ip http server	477
ip http port	477
ip http exec-timeout	478
ip https server	479
ip https port	479
ip https exec-timeout	480
crypto certificate generate	481
crypto certificate request	482

Match case Limit results 1 per page

Management ACL

271

permit (management)

The

permit

Management Access-List Configuration mode command defines a permit rule.

Syntax

•

permit

[

ethernet

interface-number

vlan

vlan-id

port-channel

number

] [

service

]

•

permit ip-source

{

ipv4-address | ipv6-address/prefix-length

}

[

mask

prefix-length

] [

ethernet

interface-number

vlan

vlan-id

port-channel

number

] [

service

]

•

ethernet

interface-number

— A valid Ethernet port number.

•

vlan

vlan-id

— A valid VLAN number.

•

port-channel

number

— A valid port channel number.

•

ipv4-address

— Source IPv4 address.

•

ipv6-address/prefix-length

— Source IPv6 address and prefix length. The prefix length is optional.

•

mask

— Specifies the network mask of the source IPv4 address. The parameter is relevant

only to IPv4 addresses. (Range: Valid subnet mask)

•

mask

prefix-length

— Specifies the number of bits that comprise the source IPv4 address prefix.

The prefix length must be preceded by a forward slash (/). The parameter is relevant only to IPv4

addresses. (Range: 0 - 32)

•

service

— Indicates service type. Can be one of the following:

telnet

ssh

http,

https

snmp

Default Configuration

If no

permit

statement is present, the default is set to

deny.

Command Mode

Management Access-list Configuration mode.

User Guidelines

•

Rules with Ethernet, VLAN and port-channel parameters are valid only if an IP address is defined on

the appropriate interface.The system supports up to 256 management access rules.

Example

The following example shows how all ports are permitted in the Access-List called ’mlist’.

Console (config)#

management access-list

mlist

Console (config-macl)#

permit