Cisco Nexus 7000 Series - Permit Interface

permit interface
To permit interfaces for a user role interface policy, use the permit interface command. To deny interfaces,
use the no form of this command.
permit interface {ethernet slot / port [-port2]| interface-list}
no permit interface
Syntax Description
Specifies the Ethernet interface identifier.
ethernet slot/port
Last interface in a range of interfaces on a module.
-port
Comma-separated list of Ethernet interface
identifiers.
interface-list
Command Default
All interfaces
Command Modes
User role interface policy configuration
Command History
ModificationRelease
This command was introduced.4.0(1)
Usage Guidelines
The interface policy deny command denies a user role access to all interfaces except for those that you allow
with the permit interface command.
This command does not require a license.
Examples
This example shows how to permit a range of interfaces for a user role interface policy:
switch# configure terminal
switch(config)# role name MyRole
switch(config-role)# interface policy deny
switch(config-role-interface)# permit interface ethernet 2/1 - 8
This example shows how to permit a list of interfaces for a user role interface policy:
switch# configure terminal
switch(config)# role name MyRole
switch(config-role)# interface policy deny
switch(config-role-interface)# permit interface ethernet 1/1, ethernet 1/3, ethernet 1/5,
ethernet 1/7
This example shows how to deny an interface in a user role interface policy:
switch# configure terminal
switch(config)# role name MyRole
Cisco Nexus 7000 Series Security Command Reference
577
P Commands
permit interface