Users Guide

Security Commands 1194
User Guidelines
A rule with the specified priority-value must exist in order to be removed.
Command History
Command introduced in version 6.5 firmware.
permit (management)
Use the permit command in Management Access-List configuration mode to
set conditions for allowing packets to flow to the switch management
function.
Syntax
permit ip-source ip-address [mask mask | prefix-length ] [vlan vlan-id
|fortygigabitethernet unit/slot/port][ service service ] [ priority priority-value
]
permit {vlan
vlan-id } [service service ] [priority priority-value ]
permit service
service [priority priority-value ]
permit priority
priority-value
• vlan vlan-id — A valid VLAN number.
•
ip-address — Source IP address.
• mask
mask — Specifies the network mask of the source IP address.
• mask
prefix-length — Specifies the number of bits that comprise the
source IP address prefix. The prefix length must be preceded by a forward
slash (/). (Range: 0–32)
• service
service — Indicates service type. It can be one of the following:
telnet, ssh, http, https, tftp, snmp, sntp, or any. The any keyword indicates
that the service match for the ACL is effectively “don’t care”.
• priority
priority-value — Priority for the rule. (Range: 1 – 64)
Default Configuration
This command has no default configuration.