Cisco Nexus 5000 Series Command Reference Release 4.0(1a)N2(1) (OL-16599-01, March 2009)

Send comments to [e-mail]
6-77
Cisco Nexus 5000 Series Command Reference
OL-16599-01
Chapter 6 Security Commands
permit vlan
permit vlan
To add VLANs for a user role VLAN policy, use the permit vlan command. To remove VLANs, use the
no form of this command.
permit vlan vlan-list
no permit vlan
Syntax Description
Command Default All VLANs
Command Modes VLAN policy configuration
Command History
Usage Guidelines For permit vlan statements to work, you need to configure a command rule to allow VLAN access, as
shown in the following example:
switch(config-role)# rule number permit command configure terminal ; vlan *
Examples This example shows how to configure a range of VLANs for a user role VLAN policy:
switch(config)# role name MyRole
switch(config-role)# vlan policy deny
switch(config-role-vlan)# permit vlan 1-8
This example shows how to configure a list of VLANs for a user role VLAN policy:
switch(config)# role name MyRole
switch(config-role)# vlan policy deny
switch(config-role-vlan)# permit vlan 1, 10, 12, 20
This example shows how to remove a VLAN from a user role VLAN policy:
switch(config)# role name MyRole
switch(config-role)# vlan policy deny
switch(config-role-vlan)# no permit vlan 2
vlan-list List of VLANs that the user role has permission to access.
Release Modification
4.0(0)N1(1a) This command was introduced.