Cisco Nexus 7000 Series Command Reference

permit interface
To permit interfaces for a user role interface policy, use the permit interface command. To deny interfaces,
use the no form of this command.
permit interface {ethernet slot / port [-port2]| interface-list}
no permit interface
Syntax Description
Specifies the Ethernet interface identifier.
ethernet slot/port
Last interface in a range of interfaces on a module.
-port
Comma-separated list of Ethernet interface
identifiers.
interface-list
Command Default
All interfaces
Command Modes
User role interface policy configuration
Command History
ModificationRelease
This command was introduced.4.0(1)
Usage Guidelines
The interface policy deny command denies a user role access to all interfaces except for those that you allow
with the permit interface command.
This command does not require a license.
Examples
This example shows how to permit a range of interfaces for a user role interface policy:
switch# configure terminal
switch(config)# role name MyRole
switch(config-role)# interface policy deny
switch(config-role-interface)# permit interface ethernet 2/1 - 8
This example shows how to permit a list of interfaces for a user role interface policy:
switch# configure terminal
switch(config)# role name MyRole
switch(config-role)# interface policy deny
switch(config-role-interface)# permit interface ethernet 1/1, ethernet 1/3, ethernet 1/5,
ethernet 1/7
This example shows how to deny an interface in a user role interface policy:
switch# configure terminal
switch(config)# role name MyRole
Cisco Nexus 7000 Series Security Command Reference
577
P Commands
permit interface

Cisco Nexus 7000 Series Specifications

General

Chassis	Modular
Operating System	Cisco NX-OS
Latency	Sub-microsecond
IPv6 Support	Yes
Redundancy	Power supplies, fans, supervisors, fabric modules
Power Supply	AC or DC
Layer Support	L2, L3
Network Management	CLI, SNMP
Virtualization	VRF, vPC
Ports	10 Gigabit Ethernet, 40 Gigabit Ethernet, 100 Gigabit Ethernet, Fibre Channel, Fibre Channel over Ethernet (FCoE)
Supported Modules	Various (1G, 10G, 40G, 100G)
Features	FCoE, OTV, LISP
MPLS Support	Yes
Quality of Service (QoS)	Yes
Security Features	ACLs, Cisco TrustSec, Control Plane Policing (CoPP)
Dimensions	Varies by model
Weight	Varies by model
Operating Temperature	0 to 40°C (32 to 104°F)
Storage Temperature	-40°F to 158°F (-40°C to 70°C)
Humidity	5 to 95% noncondensing
MTBF	Varies by model
Number of Slots	Varies by model (9-slot, 10-slot, 18-slot)