Send comments to nx5000-docfeedback@cisco.com
6-75
Cisco Nexus 5000 Series Command Reference
OL-16599-01
Chapter 6 Security Commands
permit interface
permit interface
To add interfaces for a user role interface policy, use the permit interface command. To remove
interfaces, use the no form of this command.
permit interface interface-list
no permit interface
Syntax Description
Command Default All interfaces
Command Modes Interface policy configuration
Command History
Usage Guidelines For permit interface statements to work, you need to configure a command rule to allow interface access,
as shown in the following example:
switch(config-role)# rule number permit command configure terminal ; interface *
Examples This example shows how to configure a range of interfaces for a user role interface policy:
switch(config)# role name MyRole
switch(config-role)# interface policy deny
switch(config-role-interface)# permit interface ethernet 1/2 - 8
This example shows how to configure a list of interfaces for a user role interface policy:
switch(config)# role name MyRole
switch(config-role)# interface policy deny
switch(config-role-interface)# permit interface ethernet 1/1, ethernet 1/3, ethernet 1/5
This example shows how to remove an interface from a user role interface policy:
switch(config)# role name MyRole
switch(config-role)# interface policy deny
switch(config-role-interface)# no permit interface ethernet 1/2
Related Commands
interface-list List of interfaces that the user role has permission to access.
Release Modification
4.0(0)N1(1a) This command was introduced.
Command Description
interface policy deny Enters interface policy configuration mode for a user role.