S e n d f e e d b a c k t o n x 5 0 0 0 - d o c f e e d b a c k @ c i s c o . c o m
1-9
Cisco Nexus 5000 Series Switch CLI Software Configuration Guide
OL-16597-01
Chapter 1 Configuring User Accounts and RBAC
Verifying User Accounts and RBAC Configuration
Verifying User Accounts and RBAC Configuration
To display user account and RBAC configuration information, perform one of the following tasks:
Example User Accounts and RBAC Configuration
The following example shows how to configure a user role:
role name UserA
rule 3 permit read feature l2nac
rule 2 permit read feature dot1x
rule 1 deny command clear *
Command
Purpose
Step 1
switch#
configure terminal
Enters global configuration mode.
Step 2
switch(config-role)#
role name
role-name
Specifies a user role and enters role configuration
mode.
Step 3
switch(config-role)#
rule
number
permit
command
vsan database; vsan *
Configures a command rule to allow access to all
VSANs.
Step 4
switch(config-role)#
vsan policy deny
Enters role VSAN policy configuration mode.
Step 5
switch(config-role-vsan)#
permit vsan
vsan-list
Specifies a range of VSANs that the role can access.
Repeat this command for as many VSANs as
needed.
Step 6
switch(config-role-vsan)#
exit
Exits role VSAN policy configuration mode.
Step 7
switch(config-role)#
show role
Example:
switch(config-role)# show role
(Optional) Displays the role configuration.
Step 8
switch(config-role)#
copy running-config
startup-config
(Optional) Copies the running configuration to the
startup configuration.
Command
Purpose
show role
Displays the user role configuration
show role feature
Displays the feature list.
show role feature-group
Displays the feature group configuration.
show startup-config security
Displays the user account configuration in the startup
configuration.
show running-config security
[
all
]
Displays the user account configuration in the running
configuration. The
all
keyword displays the default
values for the user accounts.
show user-account
Displays user account information.