Management ACL Commands 1475Management access list names can consist of any printable character,including blanks. Enclose the name in quotes to embed blanks in the name.ExamplesThe following example shows how to configure two management interfaces,gigabit Ethernet 1/0/1 and gigabit Ethernet 2/0/9.console(config)#management access-list mlistconsole(config-macal)# permit gigabitethernet 1/0/1 priority 1console(config-macal)# permit gigabitethernet 2/0/9 priority 1console(config-macal)# exitconsole(config)#management access-class mlistThe following example shows how to configure all the interfaces to bemanagement interfaces except for two interfaces, gigabit Ethernet 1/0/1 andgigabit Ethernet 2/0/9.console(config)# management access-list mlistconsole(config-macal)# deny gigabitethernet 1/0/1 priority 1console(config-macal)# deny gigabitethernet 2/0/9 priority 2console(config-macal)# permit priority 2console(config-macal)# exitconsole(config) # management access-class mlistpermit (management)Use the permit command in Management Access-List configuration mode toset conditions for the management access list.Syntaxpermit ip-sourceip-address [maskmask |prefix-length] [gigabitethernetunit/slot/port | vlanvlan-id | port-channelport-channel-number |tengigabitethernet unit/slot/port][ serviceservice ] [ prioritypriority-value ]permit {gigabitethernet unit/slot/port | vlanvlan-id | port-channelport-channel-number | tengigabitethernet unit/slot/port} [serviceservice][prioritypriority-value]permit serviceservice [prioritypriority-value]permit prioritypriority-value
