Users Guide

Security Commands 1158
console(config)# management access-class mlist
management access-list
Use the management access-list command in Global Configuration mode to
define an access list for management, and enter the access-list configuration
mode for editing the access list conditions. Once in access-list configuration
mode, access conditions are configured with the deny and permit commands.
To remove an access list, use the no form of this command.
Syntax
management access-list name
no management access-list name
• name — The access list name. (Range: 1–32 printable characters)
Default Configuration
This command has no default configuration.
Command Mode
Global Configuration mode
User Guidelines
A management access list is only supported on the switched VLAN interfaces.
It is not supported on the out-of-band interface.
This command enters the access-list configuration mode, where access
conditions may be defined with deny and permit commands.
If no match criteria are defined the default is to deny the packet (i.e., the
packet is dropped).
If editing an access-list context, new rules are appended to the end of the
access-list.
Use the management access-class command to select the active access-list.
The active management list cannot be updated or removed.
Management access list names can consist of any printable character,
including blanks. Enclose the name in quotes to embed blanks in the name.
Question marks are disallowed.