Purpose
Command or Action
switch(config-role)# rule 3 permit read feature
router-bgp
Repeat this command for as many rules as needed.
Configures a read-only or read-and-write rule for a feature
group.
rule number
{
deny
|
permit
} {
read
|
read-write
}
feature-group group-name
Step 6
Example:
Use the
show role feature-group
command to display a
list of feature groups.
switch(config-role)# rule 4 deny read-write
feature-group L3
Repeat this command for as many rules as needed.
Configures a read-only or read-and-write rule for an SNMP
object identifier (OID). You can enter up to 32 elements
rule number
{
deny
|
permit
} {
read
|
read-write
}
oid
snmp_oid_name
Step 7
for the OID. This command can be used to allow
Example:
SNMP-based performance monitoring tools to poll devices
switch(config-role)# rule 5 deny read-write oid
1.3.6.1.2.1.1.9
but restrict their access to system-intensive branches such
as the IP routing table, MAC address tables, specific MIBs,
and so on.
The deepest OID can be at the scalar level or
at the table root level.
Note
Repeat this command for as many rules as needed.
Configures the role description. You can include spaces
in the description.
(Optional)
description text
Example:
Step 8
switch(config-role)# description This role does
not allow users to use clear commands
Exits role configuration mode.
exit
Example:
Step 9
switch(config-role)# exit
switch(config)#
Displays the user role configuration.
(Optional)
show role
Example:
Step 10
switch(config)# show role
Displays the user role configuration pending for
distribution.
(Optional)
show role
{
pending
|
pending-diff
}
Example:
Step 11
switch(config)# show role pending
Applies the user role configuration changes in the
temporary database to the running configuration.
(Optional)
role commit
Example:
Step 12
switch(config)# role commit
Copies the running configuration to the startup
configuration.
(Optional)
copy running-config startup-config
Example:
Step 13
switch(config)# copy running-config startup-config
Cisco Nexus 9000 Series NX-OS Security Configuration Guide, Release 9.x
164
Configuring User Accounts and RBAC
Creating User Roles and Rules
