Cisco Cisco Prime IP Express 8.3 Technical References
Match list entries can consist of IP node or subnet addresses,
TSIG keys, or ACLs. A TSIG key must also be preceded by the
keyword "key". The "!" notation can be used to negate an entry
in the list.
Note: While match lists are displayed with spaces, spaces should
not be specified in entered lists.
TSIG keys, or ACLs. A TSIG key must also be preceded by the
keyword "key". The "!" notation can be used to negate an entry
in the list.
Note: While match lists are displayed with spaces, spaces should
not be specified in entered lists.
Examples
nrcmd> acl my-acl create "key my-key, 10.1.0.0/16"
nrcmd> acl my-acl set match-list="10.1.1.1/32,other-acl"
nrcmd> acl my-acl add "!10.2.0.0/16"
nrcmd> acl my-acl set match-list="10.1.1.1/32,other-acl"
nrcmd> acl my-acl add "!10.2.0.0/16"
Status
See Also
Attributes
Displays a comma-separated list of match elements, which
can consist of IP node or subnet addresses, TSIG keys,
or ACLs. You can also use the following reserved words as
elements in a match list:
any
none
localhost
localnets
To specify more than one element in the match list, enclose
the list in quotation marks; for example:
"192.168.2.1, localhost"
Use the object name to reference another ACL or TSIG key or
GSS ACL to support Microsoft Secure updates.
A TSIG key must also be preceded by the keyword <>key<>;
for example,
key mykey.
A GSS ACL must also be preceded by the keyword grp <>grp<>;
To allow All Microsoft-clients use any, domain-controller or
domain-computer groups;
for example,
grp any
grp domain-controller
grp domain-computer
You must specify subnet addresses in address/mask format.
Use an exclamation point (!)to negate an entry in the
list; for example,
"!192.168.3.0/24,!youracl"
Note: You can define the name reference to an ACL in the
match list before you actually create the ACL. But the ACL must
exist before you start or reload the DNS server. If the DNS server
cannot resolve an ACL name reference on either the DNS server
object or a zone object, it will flag the error and will not start.
can consist of IP node or subnet addresses, TSIG keys,
or ACLs. You can also use the following reserved words as
elements in a match list:
any
none
localhost
localnets
To specify more than one element in the match list, enclose
the list in quotation marks; for example:
"192.168.2.1, localhost"
Use the object name to reference another ACL or TSIG key or
GSS ACL to support Microsoft Secure updates.
A TSIG key must also be preceded by the keyword <>key<>;
for example,
key mykey.
A GSS ACL must also be preceded by the keyword grp <>grp<>;
To allow All Microsoft-clients use any, domain-controller or
domain-computer groups;
for example,
grp any
grp domain-controller
grp domain-computer
You must specify subnet addresses in address/mask format.
Use an exclamation point (!)to negate an entry in the
list; for example,
"!192.168.3.0/24,!youracl"
Note: You can define the name reference to an ACL in the
match list before you actually create the ACL. But the ACL must
exist before you start or reload the DNS server. If the DNS server
cannot resolve an ACL name reference on either the DNS server
object or a zone object, it will flag the error and will not start.
tenant-id
Identifies the tenant owner of this object.
addr-trap
addr-trap - Configures free-address monitoring by the DHCP server
Synopsis
addr-trap <name> create
addr-trap <name> delete
addr-trap enable <attribute>
addr-trap <name> disable <attribute>
addr-trap <name> delete
addr-trap enable <attribute>
addr-trap <name> disable <attribute>