Cisco Nexus 7000 Series, Command Reference Manual

Page: 603 / 1018

permit interface
To permit interfaces for a user role interface policy, use the permit interface command. To deny interfaces,
use the no form of this command.
permit interface { ethernet slot / port [-port2] | interface-list }
no permit interface
Syntax Description
Specifies the Ethernet interface identifier. ethernet slot / port
Last interface in a range of interfaces on a module. -port
Comma-separated list of Ethernet interface
identifiers. interface-list
Command Default
All interfaces
Command Modes
User role interface policy configuration
Command History
Modification Release
This command was introduced. 4.0(1)
Usage Guidelines
The
interface policy deny
command denies a user role access to all interfaces except for those that you allow
with the
permit interface
command.
This command does not require a license.
Examples
This example shows how to permit a range of interfaces for a user role interface policy:
switch#
configure terminal
switch(config)# role name MyRole
switch(config-role)# interface policy deny
switch(config-role-interface)# permit interface ethernet 2/1 - 8
This example shows how to permit a list of interfaces for a user role interface policy:
switch# configure terminal
switch(config)# role name MyRole
switch(config-role)# interface policy deny
switch(config-role-interface)#
permit interface ethernet 1/1, ethernet 1/3, ethernet 1/5,
ethernet 1/7
This example shows how to deny an interface in a user role interface policy:
switch#
configure terminal
switch(config)#
role name MyRole
Cisco Nexus 7000 Series Security Command Reference
577
P Commands
permit interface