Table of Contents
Advertisement
Deny—Denies management access to the defined interface.
¡
3. Define the Access Profile Name field.
4. Define the Rule Priority, Management Method, Interface, Source IP, Network Mask, Prefix Length, and Action fields.
5. Click Apply Changes. The rule is added, and the device is updated.
Viewing the Profile Rules Table:
NOTE:
The order in which rules appear in the Profile Rules Table is important. Packets are matched to the first rule which meets the rule criteria.
1. Open the Access Profiles page.
2. Click Show All.The Profile Rules Table page opens.
Profile Rules Table Page
3. Click Apply Changes.
Removing a Rule:
NOTE:
When a rule is deleted, the profile name is also deleted.
1. Open the Access Profiles page.
2. Click Show All.The Profile Rules Table opens.
3. Select a rule in the Profile Rules Table page.
4. Check the Remove check box.
5. Click Apply Changes. The rule is deleted, and the device is updated.
Defining Access Profiles Using CLI Commands
The following table summarizes the equivalent CLI commands for viewing fields displayed in the Access Profiles page.
CLI Command
management access-list name
permit [ethernet interface-number | vlan vlan-id | port-channel number] [service
service]
permit ip-source ip-address [mask mask | prefix-length] [ethernet interface-number
| vlan vlan-id | port-channel number] [service service]
deny [ethernet interface-number | vlan vlan-id | port-channel number] [service
service]
deny ip-source ip-address [mask mask | prefix-length] [ethernet interface-number |
vlan vlan-id | port-channel number] [service service]
management access-class {console-only | name}
show management access-list [name]
show management access-class
Description
Defines an access-list for management, and enters the access-
list context for configuration.
Sets port permitting conditions for the management access list.
Sets port permitting conditions for the management access list,
and the selected management method.
Sets port denying conditions for the management access list,
and the selected management method.
Sets port denying conditions for the management access list,
and the selected management method.
Defines which access-list is used as the active management
connections.
Displays the active management access-lists.
Displays information about management access-class.
Advertisement
Table of Contents
