permit vlan
permit vlan
To add VLANs for a user role VLAN policy, use the permit vlan command. To remove VLANs, use the
no form of this command.
Syntax Description
vlan-list
Command Default
All VLANs
Command Modes
VLAN policy configuration mode
Command History
Release
5.2(1)N1(1)
Usage Guidelines
For permit vlan statements to work, you need to configure a command rule to allow VLAN access, as
shown in the following example:
switch(config-role)# rule number permit command configure terminal ; vlan *
Examples
This example shows how to configure a range of VLANs for a user role VLAN policy:
switch(config)# role name MyRole
switch(config-role)# vlan policy deny
switch(config-role-vlan)# permit vlan 1-8
This example shows how to configure a list of VLANs for a user role VLAN policy:
switch(config)# role name MyRole
switch(config-role)# vlan policy deny
switch(config-role-vlan)# permit vlan 1, 10, 12, 20
This example shows how to remove a VLAN from a user role VLAN policy:
switch(config)# role name MyRole
switch(config-role)# vlan policy deny
switch(config-role-vlan)# no permit vlan 2
Cisco Nexus 5500 Series NX-OS Security Command Reference
214
permit vlan vlan-list
no permit vlan
List of VLANs that the user role has permission to access.
Modification
This command was introduced.
Chapter
P Commands
OL-27883-02