HP Cisco MDS 9120 Cisco Nexus 5000 Series Command Reference Release 4.0(1a)N2( - Page 411

Chapter 6 Security Commands permit vlan Send comments to [email protected] permit vlan To add VLANs for a user role VLAN policy, use the permit vlan command. To remove VLANs, use the no form of this command. permit vlan vlan-list no permit vlan Syntax Description vlan-list List of VLANs that the user role has permission to access. Command Default All VLANs Command Modes VLAN policy configuration Command History Release 4.0(0)N1(1a) Modification This command was introduced. Usage Guidelines For permit vlan statements to work, you need to configure a command rule to allow VLAN access, as shown in the following example: switch(config-role)# rule number permit command configure terminal ; vlan * Examples This example shows how to configure a range of VLANs for a user role VLAN policy: switch(config)# role name MyRole switch(config-role)# vlan policy deny switch(config-role-vlan)# permit vlan 1-8 This example shows how to configure a list of VLANs for a user role VLAN policy: switch(config)# role name MyRole switch(config-role)# vlan policy deny switch(config-role-vlan)# permit vlan 1, 10, 12, 20 This example shows how to remove a VLAN from a user role VLAN policy: switch(config)# role name MyRole switch(config-role)# vlan policy deny switch(config-role-vlan)# no permit vlan 2 OL-16599-01 Cisco Nexus 5000 Series Command Reference 6-77