Security Commands 1037deny (management)Use the deny command in Management Access-List Configuration mode toset conditions for disallowing packets to flow to the switch managementfunction.Syntaxdeny [gigabitethernet unit/slot/port | vlan vlan-id | port-channel port-channel-number | tengigabitethernet unit/slot/port | fortygigabitethernetunit/slot/port] [service service] [priority priority]deny ip-source ip-address [mask mask | prefix-length] [gigabitethernetunit/slot/port | vlan vlan-id | port-channel port-channel-number |tengigabitethernet unit/slot/port | fortygigabitethernet unit/slot/port][service service] [priority priority]• gigabitethernet unit/slot/port — A valid 1-Gigabit Ethernet-routed portnumber.• vlan vlan-id — A valid VLAN number.• port-channel port-channel-number — A valid routed port-channelnumber.• tengigabitethernet unit/slot/port — A valid 10-Gigabit Ethernet-routedport number.• fortygigabitethernet unit/slot/port – A valid 40-Gigabit Ethernet-routedport number.• ip-address — Source IP address.• mask mask — Specifies the network mask of the source IP address.• mask prefix-length — Specifies the number of bits that comprise thesource IP address prefix. The prefix length must be preceded by a forwardslash (/). (Range: 0–32)deny (management) permit (management)management access-class show management access-classmanagement access-list show management access-list
