Cisco Nexus 5500 Series - Permit Vlan

214
Cisco Nexus 5500 Series NX-OS Security Command Reference
OL-27883-02
Chapter P Commands
permit vlan
permit vlan
To add VLANs for a user role VLAN policy, use the permit vlan command. To remove VLANs, use the
no form of this command.
permit vlan vlan-list
no permit vlan
Syntax Description
Command Default All VLANs
Command Modes VLAN policy configuration mode
Command History
Usage Guidelines For permit vlan statements to work, you need to configure a command rule to allow VLAN access, as
shown in the following example:
switch(config-role)# rule number permit command configure terminal ; vlan *
Examples This example shows how to configure a range of VLANs for a user role VLAN policy:
switch(config)# role name MyRole
switch(config-role)# vlan policy deny
switch(config-role-vlan)# permit vlan 1-8
This example shows how to configure a list of VLANs for a user role VLAN policy:
switch(config)# role name MyRole
switch(config-role)# vlan policy deny
switch(config-role-vlan)# permit vlan 1, 10, 12, 20
This example shows how to remove a VLAN from a user role VLAN policy:
switch(config)# role name MyRole
switch(config-role)# vlan policy deny
switch(config-role-vlan)# no permit vlan 2
vlan-list List of VLANs that the user role has permission to access.
Release Modification
5.2(1)N1(1) This command was introduced.