Home » HP Manuals » Hubs & Switches » HP AP775A » Manual Viewer

HP AP775A Cisco Nexus 5000 Series Command Reference, Release 4.1(3)N1(1) (OL-1 - Page 427

permit vrf

UPC - 884962062708

Add to My Manuals
Save this manual to your list of manuals

Page 427 highlights

Chapter 6 Security Commands permit vrf Send comments to [email protected] permit vrf To add virtual routing and forwarding instances (VRFs) for a user role VRF policy, use the permit vrf command. To remove VRFs, use the no form of this command. permit vrf vrf-list no permit vrf Syntax Description vrf-list List of VRFs that the user role has permission to access. Command Default All VRFs Command Modes VRF policy configuration Command History Release 4.0(0)N1(1a) Modification This command was introduced. Examples This example shows how to configure a range of VRFs for a user role VRF policy: switch(config)# role name MyRole switch(config-role)# vrf policy deny switch(config-role-vrf)# permit vrf management Related Commands Command vrf policy deny role name show role Description Enters VRF policy configuration mode for a user role. Creates or specifies a user role and enters user role configuration mode. Displays user role information. OL-16599-01 Cisco Nexus 5000 Series Command Reference 6-79

Section	Page
Cisco Nexus 5000 Series Command Reference	1
Contents	3
Preface	21
Audience	21
Organization	21
Document Conventions	22
Obtaining Documentation and Submitting a Service Request	23
Related Documentation	23
Basic System Commands	25
banner motd	26
boot	27
cd	29
clear cli history	30
clear cores	31
clear debug-logfile	32
clear install failure-reason	33
clear license	34
clear user	35
cli var name	36
clock set	38
clock summer-time	39
clock timezone	41
configure session	42
configure terminal	43
copy	44
copy running-config startup-config	48
databits	49
debug logfile	50
debug logging	51
delete	52
dir	54
echo	56
end	57
exec-timeout	58
exit (EXEC)	60
exit (global)	61
feature fcoe	62
feature interface-vlan	63
feature lacp	64
feature private-vlan	65
feature tacacs+	66
feature udld	67
find	68
format	69
gunzip	70
gzip	71
hostname	72
install all	73
install license	76
line console	77
line vty	78
modem in	79
modem init-string	80
modem set-string user-input	82
move	83
parity	85
ping	86
ping6	88
reload	90
rmdir	91
run-script	92
save	93
send	94
setup	95
session-limit	96
show banner motd	97
show boot	98
show cli alias	99
show cli history	100
show cli variables	101
show clock	102
show copyright	103
show debug logfile	104
show environment	105
show file	106
show hardware internal	107
show hostname	108
show incompatibility system	109
show install all	110
show inventory	111
show license	112
show license host-id	113
show license usage	114
show line	116
show module	117
show processes	118
show processes cpu	119
show processes log	120
show processes memory	121
show running-config	122
show running-config diff	123
show sprom	125
show startup-config	127
show switchname	128
show system cores	129
show system reset-reason	130
show system uptime	131
show tech-support	132
show terminal	133
show version	134
sleep	135
speed	136
stopbits	137
system cores	138
system startup-config unlock	139
switchname	140
tail	141
terminal length	142
terminal session-timeout	143
terminal terminal-type	144
terminal width	145
traceroute	146
traceroute6	147
update license	148
write erase	149
Ethernet Commands	151
bandwidth (interface)	152
cdp	154
cdp enable	156
channel-group (Ethernet)	157
clear mac access-list counters	160
clear mac dynamic	161
clear mac-address-table dynamic	162
clear spanning-tree counters	164
clear spanning-tree detected-protocol	165
delay (interface)	166
description (interface)	167
instance vlan	168
interface ethernet	170
interface port-channel	171
ip igmp snooping (EXEC)	173
ip igmp snooping (VLAN)	174
lacp port-priority	176
lacp system-priority	177
link debounce	178
mac-address-table aging-time	179
mac-address-table notification	181
mac-address-table static	182
monitor session	184
name (VLAN configuration)	185
name (MST configuration)	186
port-channel load-balance ethernet	187
private-vlan	189
private-vlan association	191
private-vlan synchronize	193
revision	194
shutdown (VLAN configuration)	195
spanning-tree bpdufilter	197
spanning-tree bpduguard	199
spanning-tree cost	201
spanning-tree guard	203
spanning-tree link-type	204
spanning-tree loopguard default	205
spanning-tree mode	206
spanning-tree mst configuration	207
spanning-tree mst cost	209
spanning-tree mst forward-time	211
spanning-tree mst hello-time	212
spanning-tree mst max-age	213
spanning-tree mst max-hops	214
spanning-tree mst port-priority	215
spanning-tree mst priority	216
spanning-tree mst root	217
spanning-tree mst simulate pvst	219
spanning-tree mst simulate pvst global	221
spanning-tree pathcost method	223
spanning-tree port type edge	224
spanning-tree port type edge bpdufilter default	226
spanning-tree port type edge bpduguard default	228
spanning-tree port type edge default	230
spanning-tree port type network	232
spanning-tree port type network default	234
spanning-tree port-priority	236
spanning-tree vlan	237
speed (Ethernet)	239
state	240
svi enable	241
switchport access vlan	242
switchport block	243
switchport mode private-vlan host	244
switchport mode private-vlan promiscuous	245
switchport private-vlan host-association	246
switchport private-vlan mapping	248
udld (configuration mode)	250
udld (Ethernet)	252
vlan (EXEC mode)	253
vrf context	255
Ethernet Show Commands	257
show interface mac-address	258
show interface private-vlan mapping	259
show interface switchport	260
show interface vlan	261
show ip igmp snooping	263
show lacp	264
show mac-address-table aging-time	265
show mac-address-table count	266
show mac-address-table notification	267
show mac-address-table	268
show monitor session	270
show running-config	271
show running-config spanning-tree	272
show running-config vlan	273
show spanning-tree	274
show spanning-tree active	277
show spanning-tree bridge	278
show spanning-tree brief	280
show spanning-tree detail	281
show spanning-tree interface	282
show spanning-tree mst	284
show spanning-tree root	286
show spanning-tree summary	288
show spanning-tree vlan	289
show startup-config	292
show vlan	293
show vlan id	295
show vlan private-vlan	296
Fabric Extender Commands	297
attach fex	298
beacon	299
description (fex)	300
fex	301
fex associate	302
fex pinning redistribute	303
logging fex	304
pinning max-links	305
serial	307
show diagnostic result fex	309
show environment fex	310
show fex	311
show fex transceiver	312
show fex version	313
show interface fex-fabric	314
show interface fex-intf	315
show interface transceiver fex-fabric	316
switchport mode fex-fabric	317
Quality of Service Commands	319
class-map	320
flowcontrol	321
match cos (class map type qos)	322
match access-group	323
match class-map	324
match cos (class map type qos)	325
match cos (class map type queuing)	326
match dscp	327
match ip rtp	329
match precedence	330
match protocol	332
policy-map type qos	334
priority-flow-control	335
service-policy	336
show class-map type qos	338
show class-map type queuing	339
show policy-map	340
show policy-map interface	341
show policy-map interface brief	342
show interface priority-flow-control	343
show policy-map interface	344
system jumbomtu	345
system qos	346
untagged cos	347
Security Commands	349
aaa accounting default	350
aaa authentication login console	351
aaa authentication login default	353
aaa authentication login error-enable	355
aaa authentication login mschap enable	356
aaa group server radius	357
action	358
clear access-list counters	359
clear accounting log	360
deadtime	361
deny (IPv4)	363
deny (IPv6)	373
deny (MAC)	382
description (user role)	385
feature	386
interface policy deny	387
ip access-list	388
ip port access-group	390
ipv6 access-list	392
ipv6 port traffic-filter	393
mac access-list	395
mac port access-group	397
match	399
permit (IPv4)	401
permit (IPv6)	411
permit (MAC)	420
permit interface	423
permit vlan	425
permit vrf	427
radius-server deadtime	428
radius-server directed-request	429
radius-server host	430
radius-server key	432
radius-server retransmit	433
radius-server timeout	434
remark	435
resequence	437
role feature-group name	439
role name	440
rule	441
server	443
show aaa accounting	445
show aaa authentication	446
show aaa groups	447
show access-lists	448
show accounting log	449
show ip access-lists	450
show ipv6 access-lists	451
show mac access-lists	453
show radius-server	454
show role	456
show role feature	457
show role feature-group	458
show running-config aaa	459
show running-config radius	460
show running-config security	461
show ssh key	462
show ssh server	463
show startup-config aaa	464
show startup-config radius	465
show startup-config security	466
show tacacs-server	467
show telnet server	469
show user-account	470
show users	471
show vlan access-list	472
show vlan access-map	473
show vlan filter	474
ssh	475
ssh6	476
ssh key	477
ssh server enable	479
storm-control level	480
tacacs-server deadtime	482
tacacs-server directed-request	483
tacacs-server host	484
tacacs-server key	486
tacacs-server timeout	487
telnet	488
telnet server enable	489
telnet6	490
use-vrf	491
username	493
vlan access-map	495
vlan filter	496
vlan policy deny	498
vrf policy deny	499
System Management Commands	501
clear logging nvram	502
clear logging onboard	503
clear logging session	504
clear ntp session	505
clear ntp statistics	506
logging console	507
logging event	508
logging event port	509
logging level	510
logging logfile	512
logging module	514
logging monitor	515
logging server	516
logging timestamp	518
ntp	519
ntp abort	520
ntp commit	521
ntp distribute	522
ntp sync-retry	523
show logging console	524
show logging info	525
show logging last	526
show logging level	527
show logging logfile	528
show logging module	529
show logging monitor	530
show logging nvram	531
show logging onboard	532
show logging server	537
show logging session status	538
show logging status	539
show logging timestamp	540
show ntp peer-status	541
show ntp peers	542
show ntp statistics	543
show ntp timestamp-status	544
System Message Logging Facilities	545
Fibre Channel Commands	549
cfs distribute	550
cfs ipv4 distribute	551
cfs ipv4 mcast-address	553
cfs ipv6 distribute	555
cfs ipv6 mcast-address	557
cfs region	559
cfs staggered-merge	560
clear device-alias	561
clear fcdomain	562
clear fcflow stats	563
clear fcns statistics	564
clear fcsm log	565
clear fcs statistics	566
clear fctimer session	567
clear fspf counters	568
clear port-security	569
clear rlir	570
clear rscn session	571
clear rscn statistics	572
clear zone	573
device-alias abort	574
device-alias commit	575
device-alias database	576
device-alias distribute	577
device-alias import fcalias	578
device-alias mode	579
device-alias name	580
device-alias rename	581
discover custom-list	582
discover scsi-target	583
fabric profile	585
fabric-binding activate	586
fabric-binding database copy	587
fabric-binding database diff	588
fabric-binding database vsan	589
fabric-binding enable	591
fcalias clone	592
fcalias name	593
fcalias rename	594
fcdomain	595
fcdomain abort vsan	597
fcdomain commit vsan	598
fcdomain distribute	599
fcdomain rcf-reject	600
fcdroplatency	601
fcflow stats	602
fcid-allocation	604
fcinterop fcid-allocation	605
fcns no-auto-poll	606
fcns proxy-port	607
fcns reject-duplicate-pwwn vsan	608
fcping	609
fcroute	611
fcs plat-check-global	613
fcs register	614
fcs virtual-device-add	615
fcsp	616
fcsp dhchap	618
fcsp enable	620
fcsp reauthenticate	621
fcsp timeout	622
fctimer	623
fctimer abort	624
fctimer commit	625
fctimer distribute	626
fctrace	627
fdmi suppress-updates	628
fspf config	629
fspf cost	631
fspf dead-interval	632
fspf enable	633
fspf hello-interval	634
fspf passive	635
fspf retransmit-interval	636
in-order-guarantee	637
interface fc	638
interface san-port-channel	640
interface vfc	642
logging abort	644
logging commit	645
logging distribute	646
member (fcalias configuration mode)	647
member (zone configuration mode)	649
member (zoneset configuration mode)	651
npiv enable	652
npv auto-load-balance disruptive	653
npv enable	654
npv traffic-map	655
port-security	656
port-security abort	658
port-security commit	659
port-security database	660
port-security distribute	662
port-security enable	663
port-track enable	664
port-track force-shut	665
port-track interface	666
purge fcdomain fcid	667
rlir preferred-cond fcid	668
rscn	670
rscn abort	671
rscn commit	672
rscn distribute	673
rscn event-tov	674
san-port-channel persistent	675
scsi-target	676
switchport	678
switchport ignore bit-errors	681
system default switchport	683
system default zone default-zone permit	685
system default zone distribute full	686
trunk protocol enable	687
vsan database	688