Users Guide

Security Commands 1159
Examples
The following example shows how to permit access to switch management via
VLAN interface 9. Be sure to restrict access to this VLAN to the fewest ports
possible remembering that, by default, trunk mode ports are members of all
VLANs.
console(config)#vlan 9
console(config-vlan9)#exit
console(config)#management access-list mlist
console(config-macal)#permit vlan 9 priority 1
console(config-macal)#exit
console(config)#management access-class mlist
The following example shows how to configure all VLAN interfaces to
support switch management access except for two VLAN interfaces.
console(config)#vlan 9,10
console(config-vlan9-10)#exit
console(config)#management access-list mlist
console(config-macal)#deny vlan 9 priority 1
console(config-macal)#deny vlan 10 priority 2
console(config-macal)#permit priority 3
console(config-macal)#exit
console(config) #management access-class mlist
no priority (management)
Use the no priority command to remove a permit or deny condition from a
Management Access list.
Syntax
no priority priority
priority-value—The priority of the permit or deny rule to be removed. The
range is 1 to 64.
Default Configuration
This command has no default configuration.
Command Mode
Management Access-list Configuration mode