HP Cisco MDS 9140 Cisco Nexus 5000 Series Command Reference Release 4.0(1a)N2( - Page 409

Chapter 6 Security Commands permit interface Send comments to [email protected] permit interface To add interfaces for a user role interface policy, use the permit interface command. To remove interfaces, use the no form of this command. permit interface interface-list no permit interface Syntax Description interface-list List of interfaces that the user role has permission to access. Command Default All interfaces Command Modes Interface policy configuration Command History Release 4.0(0)N1(1a) Modification This command was introduced. Usage Guidelines For permit interface statements to work, you need to configure a command rule to allow interface access, as shown in the following example: switch(config-role)# rule number permit command configure terminal ; interface * Examples This example shows how to configure a range of interfaces for a user role interface policy: switch(config)# role name MyRole switch(config-role)# interface policy deny switch(config-role-interface)# permit interface ethernet 1/2 - 8 This example shows how to configure a list of interfaces for a user role interface policy: switch(config)# role name MyRole switch(config-role)# interface policy deny switch(config-role-interface)# permit interface ethernet 1/1, ethernet 1/3, ethernet 1/5 This example shows how to remove an interface from a user role interface policy: switch(config)# role name MyRole switch(config-role)# interface policy deny switch(config-role-interface)# no permit interface ethernet 1/2 Related Commands Command Description interface policy deny Enters interface policy configuration mode for a user role. OL-16599-01 Cisco Nexus 5000 Series Command Reference 6-75