HP Cisco MDS 9222i Cisco Nexus 5000 Series Command Reference Release 4.0(1a)N2 - Page 427

Chapter 6 Security Commands rule Send comments to [email protected] rule To configure rules for a user role, use the rule command. To delete a rule, use the no form of this command. rule number {deny | permit} {command command-string | {read | read-write} [feature feature-name | feature-group group-name]} no rule number Syntax Description number deny permit command command-string read read-write feature feature-name feature-group group-name Sequence number for the rule. The switch applies the rule with the highest value first and then the rest in descending order. Denies access to commands or features. Permits access to commands or features. Specifies a command string. Specifies read access. Specifies read and write access. (Optional) Specifies a feature name. Use the show role feature command to list the switch feature names. (Optional) Specifies a feature group. Command Default None Command Modes User role configuration. Command History Release 4.0(0)N1(1a) Modification This command was introduced. Usage Guidelines You can configure up to 256 rules for each role. The rule number that you specify determines the order in which the rules are applied. Rules are applied in descending order. For example, if a role has three rules, rule 3 is applied before rule 2, which is applied before rule 1. Examples This example shows how to add rules to a user role: switch(config)# role MyRole switch(config-role)# rule 1 deny command clear users switch(config-role)# rule 1 permit read-write feature-group L3 OL-16599-01 Cisco Nexus 5000 Series Command Reference 6-93