2.2.4. permit

Syntax

[sequence <1-65535>] permit interfaces IF_PORTS service (all|http|https|snmp|ssh|telnet)

[sequence <1-65535>] permit ip A.B.C.D/A.B.C.D interfaces IF_PORTS service (all|http|https|snmp|ssh|telnet)

[sequence <1-65535>] permit ipv6 X:X::X:X/<0-128> interfaces IF_PORTS service (all|http|https|snmp|ssh|telnet)

Parameter

<1-65535> (Optional) Specify sequence index of ACL entry, the sequence index represent the priority of an entry in ACL. If not specified, the switch assigns a number from 1 in ascending order.

interfaces IF_PORTS Specify the interface ID or a list of interface IDs.

ip A.B.C.D/A.B.C.D Specify the source IP address and mask of packet.

ipv6 X:X::X:X/<0-128 Specify the source IPv6 address and prefix length of packet.

(all| Specify the type of services. http|https|snmp|ssh|telnet)

Default

No rules are configured.

Mode

Management Access-List Configuration

Usage

Use the permit command to add permit rules that bypass those packets hit the rule.

Example

The following example shows how to add a permit rule to bypass http service packets that source ip is 2.2.2.2 from interface gi1.

Switch(config)# management access-list test
Switch(config-macl)# sequence 2 permit ip 2.2.2.2/255.255.255.255 interfaces gi1 service http