Cisco WS-X6K-SUP1A-2GE Software Guide - Page 624

IP Permit List Default Configuration Chapter 34 Configuring the IP Permit List If you do not specify the mask for an IP permit list entry, or if you enter a host name instead of an IP address, the mask has an implicit value of all bits set to one (255.255.255.255 or 0xffffffff), which matches only the IP address of that host. If you do not specify SNMP or Telnet for the type of permit list for the IP address, the IP address is added to both the SNMP and Telnet permit lists. You can specify the same IP address in more than one entry in the permit list if the masks are different. The mask is applied to the address before it is stored in NVRAM, so that entries that have the same effect (but different addresses) are not stored. When you add such an address to the IP permit list, the system displays the address after the mask is applied. IP Permit List Default Configuration Table 34-1 shows the default IP permit list configuration. Table 34-1 IP Permit List Default Configuration Feature IP permit list enable state Permit list entries IP syslog message severity level SNMP IP permit trap (ippermit) Default Value Disabled None configured 2 Disabled Configuring the IP Permit List These sections describe how to configure the IP permit list: • Adding IP Addresses to the IP Permit List, page 34-2 • Enabling the IP Permit List, page 34-3 • Disabling the IP Permit List, page 34-4 • Clearing an IP Permit List Entry, page 34-4 Adding IP Addresses to the IP Permit List An IP address can be added to the SNMP permit list, the Telnet permit list, or both lists. To add IP addresses to the IP permit list, perform this task in privileged mode: Step 1 Step 2 Task Specify the IP addresses to add to the IP permit list. Verify the IP permit list configuration. Command set ip permit ip_address [mask] [telnet | snmp | ssh] show ip permit 34-2 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02