DELL PC7024 User Manual

Management ACL Commands

Management access list names can consist of any printable character, 

including blanks. Enclose the name in quotes to embed blanks in the name.

The following example shows how to configure two management interfaces, 

gigabit Ethernet 1/0/1 and gigabit Ethernet 2/0/9.

console(config)#management access-list mlist

console(config-macal)# permit gigabitethernet 1/0/1 priority 1

console(config-macal)# permit gigabitethernet 2/0/9 priority 1

console(config-macal)# exit

console(config)#management access-class mlist

The following example shows how to configure all the interfaces to be 

management interfaces except for two interfaces, gigabit Ethernet 1/0/1 and 

gigabit Ethernet 2/0/9.

console(config)# management access-list mlist

console(config-macal)# deny gigabitethernet 1/0/1 priority 1

console(config-macal)# deny gigabitethernet 2/0/9 priority 2

console(config-macal)# permit priority 2

console(config-macal)# exit

console(config) # management access-class mlist

Use the permit command in Management Access-List configuration mode to 

set conditions for the management access list. 

permit ip-source 

ip-address [mask mask | prefix-length] [gigabitethernet 

unit/slot/port | vlan vlan-id  | port-channel port-channel-number | 

tengigabitethernet 

unit/slot/port] [ service service ] [ priority priority-value ]

permit {gigabitethernet 

unit/slot/port | vlan vlan-id | port-channel port-

channel-number | tengigabitethernet 

unit/slot/port} [service service] 

[priority 

priority-value]

permit service 

service [priority priority-value]

permit priority 

priority-value

2CSPC4.XCT-SWUM2XX1.book  Page 1417  Monday, October 3, 2011  11:05 AM