Users Guide

Security Commands 1083
If the priority-value is not specified when inputing a rule, the system assigns
the lowest numbered unused priority-value in the range 1–64. If a rule is
input with an existing priority-value, the original rule is overwritten.
Examples
The following example shows how to allow global access for two management
interfaces, Gigabit Ethernet 1/0/1 and Gigabit Ethernet 1/0/9.
console(config)#management access-list mlist
console(config-macal)# permit gigabitethernet 1/0/1 priority 1
console(config-macal)# permit gigabitethernet 1/0/9 priority 2
console(config-macal)# exit
console(config)# management access-class mlist
The following example shows how to configure all the interfaces to be
management interfaces except for two interfaces, Gigabit Ethernet 1/0/1 and
1/0/9.
console(config)# management access-list mlist
console(config-macal)# deny gigabitethernet 1/0/1 priority 1
console(config-macal)# deny gigabitethernet 1/0/9 priority 2
console(config-macal)# permit priority 3
console(config-macal)# exit
console(config)# management access-class mlist
show management access-class
Use the show management access-class command to display information
about the active management access list.
Syntax
show management access-class
Default Configuration
This command has no default configuration.
Command Mode
Privileged Exec mode, Global Configuration mode and all Configuration
submodes