1138 Management ACL Commands
deny (management)
Use the deny command in Management Access-List Configuration mode to
set conditions for the management access list.
Syntax
deny [ethernet
interface-number
| vlan
vlan-id
| port-channel
number
]
[service
service
] [priority
priority
]
deny ip-source
ip-address
[mask
mask
|
prefix-length
] [ethernet
interface-
number
| vlan
vlan-id
| port-channel
number
] [service
service
] [priority
priority
]
•
ethernet
interface-number
— A valid Ethernet-routed port number.
•
vlan
vlan-id
— A valid VLAN number.
•
port-channel
number
— A valid routed port-channel number.
•
ip-address
— Source IP address.
•
mask
mask
— Specifies the network mask of the source IP address.
•
mask
prefix-length
— Specifies the number of bits that comprise the
source IP address prefix. The prefix length must be preceded by a forward
slash (/). (Range: 0–32)
•
service
service
— Indicates service type. Can be one of the following:
telnet, ssh, http, https, tftp, or snmp.
•
priority
priority
— Priority for the rule. (Range: 1–64)
Default Configuration
This command has no default configuration.
Command Mode
Management Access-list Configuration mode
User Guidelines
Rules with ethernet, vlan, and port-channel parameters are valid only if an IP
address is defined on the appropriate interface. Ensure that each rule has a
unique priority.
